CVE-2026-77975 | Medium | 6.5 | 2026-08-31 | The affected Ebyte
product exports administrative credentials and other
sensitive configuration information without adequate protection. An
unauthenticated… |
CVE-2026-77966 | High | 8.8 | 2026-08-31 | The affected Ebyte
product does not provide separation between limited and administrative
management functions. A low privileged authenticated attacker coul… |
CVE-2026-76133 | Critical | 9.8 | 2026-08-31 | The affected Ebyte
product
uses a deprecated hashing algorithm in an authentication-related
operation. Under conditions where an attacker can manipulate or… |
CVE-2026-73819 | Critical | 9.8 | 2026-08-31 | The affected Ebyte
product's vendor configuration utility permits access to administrative
functions without verifying the operator's identity under certain… |
CVE-2026-77977 | High | 8.1 | 2026-08-28 | Ebyte gateway product's vendor configuration utility does not require authentication before
allowing certain disruptive administrative actions when default
c… |
CVE-2026-76945 | High | 7.5 | 2026-08-28 | The affected Ebyte device relies on client-managed authentication tokens
without sufficient server-side validation. An attacker may replay or
manipulate auth… |
CVE-2026-76940 | High | 7.5 | 2026-08-28 | The affected Ebyte device does not restrict repeated authentication
attempts through rate limiting or account lockout mechanisms. This could
allow an attacke… |
CVE-2026-76179 | Critical | 9.8 | 2026-08-28 | An improper protection of authentication tokens vulnerability exists in
certain Ebyte gateway products. Authentication tokens used by the web
management inte… |
CVE-2026-75814 | High | 8.8 | 2026-08-28 | The Ebyte device does not adequately verify the origin or authenticity of
requests submitted to the web management interface. An unauthenticated
remote attac… |
CVE-2026-75813 | High | 7.5 | 2026-08-28 | Certain configuration endpoints may lack proper server-side
authorization checks, allowing unauthorized users to access or modify
sensitive device settings… |
CVE-2026-75548 | Medium | 5.4 | 2026-08-28 | The affected Ebyte device web management interface does not restrict the
interface from being rendered within an external frame. An
unauthenticated remote at… |
CVE-2026-73839 | Medium | 4.6 | 2026-08-28 | Administrative credentials may be exposed in plaintext within the Ebyte
device's management interface, increasing the risk of credential
compromise through v… |
CVE-2026-73809 | High | 7.5 | 2026-08-28 | A cleartext transmission of sensitive information vulnerability exists
in certain Ebyte gateway products. The web management interface does not
adequately pr… |
CVE-2026-73125 | Critical | 9.8 | 2026-08-28 | Ebyte device web management interface does not consistently enforce
authentication before granting access to administrative functionality.
An unauthenticated… |
CVE-2026-71187 | Critical | 9.8 | 2026-08-28 | The Ebyte device relies on client side authentication logic that can be
reproduced by unauthenticated users. An attacker may generate valid
authentication re… |
CVE-2026-69658 | Critical | 9.8 | 2026-08-28 | MQTT credentials and control traffic are transmitted in cleartext,
exposing sensitive information to network-level attackers. This may
enable unauthorized de… |