CVE-2026-69658criticalCWE-319

CVE-2026-69658: falha crítica em Ebyte NA111-M Firmware

Ebyte NA111-M Cleartext Transmission of Sensitive Information

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Ebyte NA111-M

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.3%
MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Ebyte · Ebyte NA111-M Firmware
CVEs relacionadas — Ebyte NA111-M Firmware

No mesmo produto, das mais perigosas para as menos.

CVE-2026-73125CRITICALEbyte NA111-M Missing Authentication for Critical FunctionEPSS 0.8%CVE-2026-71187CRITICALEbyte NA111-M Use of Client-Side AuthenticationEPSS 0.8%CVE-2026-76179CRITICALEbyte NA111-M Use of GET Request Method With Sensitive Query StringsEPSS 0.7%CVE-2026-73819CRITICALEbyte NA111-M Weak AuthenticationEPSS 0.5%CVE-2026-76940HIGHEbyte NA111-M Improper Restriction of Excessive Authentication AttemptsEPSS 0.5%CVE-2026-77966HIGHEbyte NA111-M Missing AuthorizationEPSS 0.4%