Skip to content
OpenAdvisories
High · 8.1 CVE-2026-77977 EUVD-2026-67295GHSA-8g5x-wgwr-8jwp

Ebyte NA111-M Missing Authentication for Critical Function

Published Aug 27, 2026 · Updated Oct 5, 2026 · Assigned by icscert

Description

Ebyte gateway product's vendor configuration utility does not require authentication before
allowing certain disruptive administrative actions when default
credentials remain configured. An unauthenticated attacker on the
adjacent network could reboot the device or restore factory settings,
resulting in a loss of configuration and service availability.

Affected products

VendorProductAffectedFixed
Ebyte Ebyte NA111-M Firmware 9013-2-17 —

Advisories 1

References