Vulnerability intelligence

CVE-2026-73125

Ebyte Ebyte NA111-M Firmware CWE-306

Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.8%

Riskier than 55% of all CVEs · checked 2026-10-11

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Aug 28, 2026 · latest Aug 28, 2026

Coverage timeline

CISA Warns of Critical Flaws in Ebyte NA111-M Industrial Devices
securityonline.info · Aug 28, 2026