Ebyte Ebyte Na111-M Firmware
8 CVEs affecting Ebyte Ebyte Na111-M Firmware. Latest disclosed: 2026-08-31. Critical: 4, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76133 | Critical | 9.8 | 2026-08-31 | The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditions where an attacker can manipulate or… |
CVE-2026-73819 | Critical | 9.8 | 2026-08-31 | The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain… |
CVE-2026-76179 | Critical | 9.8 | 2026-08-28 | An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway products. Authentication tokens used by the web management inte… |
CVE-2026-71187 | Critical | 9.8 | 2026-08-28 | The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication re… |
CVE-2026-77966 | High | 8.8 | 2026-08-31 | The affected Ebyte product does not provide separation between limited and administrative management functions. A low privileged authenticated attacker coul… |
CVE-2026-75814 | High | 8.8 | 2026-08-28 | The Ebyte device does not adequately verify the origin or authenticity of requests submitted to the web management interface. An unauthenticated remote attac… |
CVE-2026-77977 | High | 8.1 | 2026-08-28 | Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default c… |
CVE-2026-76940 | High | 7.5 | 2026-08-28 | The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This could allow an attacke… |