CVE-2026-71187: falha crítica em Ebyte NA111-M Firmware
Ebyte NA111-M Use of Client-Side Authentication
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 0.8%
The Ebyte device relies on client side authentication logic that can be
reproduced by unauthenticated users. An attacker may generate valid
authentication requests and bypass authentication to obtain
administrative access to the device.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Ebyte · Ebyte NA111-M FirmwareCVEs relacionadas — Ebyte NA111-M Firmware
No mesmo produto, das mais perigosas para as menos.
CVE-2026-73125CRITICALEbyte NA111-M Missing Authentication for Critical FunctionEPSS 0.8%CVE-2026-76179CRITICALEbyte NA111-M Use of GET Request Method With Sensitive Query StringsEPSS 0.7%CVE-2026-73819CRITICALEbyte NA111-M Weak AuthenticationEPSS 0.5%CVE-2026-76940HIGHEbyte NA111-M Improper Restriction of Excessive Authentication AttemptsEPSS 0.5%CVE-2026-77966HIGHEbyte NA111-M Missing AuthorizationEPSS 0.4%CVE-2026-76133CRITICALEbyte NA111-M Use of a Broken or Risky Cryptographic AlgorithmEPSS 0.4%