Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-73125 EUVD-2026-67277GHSA-h7m6-87m3-q5r3

Ebyte NA111-M Missing Authentication for Critical Function

Published Aug 27, 2026 · Updated Oct 5, 2026 · Assigned by icscert

Description

Ebyte device web management interface does not consistently enforce
authentication before granting access to administrative functionality.
An unauthenticated remote attacker could access sensitive configuration
information, modify device settings, or disrupt availability.

Affected products

VendorProductAffectedFixed
Ebyte Ebyte NA111-M Firmware 9013-2-17 —

Advisories 2

References