CVE-2026-75814: falha de alta gravidade em Ebyte NA111-M Firmware
Ebyte NA111-M Cross-Site Request Forgery
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 0.2%
The Ebyte device does not adequately verify the origin or authenticity of
requests submitted to the web management interface. An unauthenticated
remote attacker could persuade an authenticated administrator to visit a
crafted page, causing unauthorized configuration changes or a
disruption of device availability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Ebyte · Ebyte NA111-M FirmwareCVEs relacionadas — Ebyte NA111-M Firmware
No mesmo produto, das mais perigosas para as menos.
CVE-2026-73125CRITICALEbyte NA111-M Missing Authentication for Critical FunctionEPSS 0.8%CVE-2026-71187CRITICALEbyte NA111-M Use of Client-Side AuthenticationEPSS 0.8%CVE-2026-76179CRITICALEbyte NA111-M Use of GET Request Method With Sensitive Query StringsEPSS 0.7%CVE-2026-73819CRITICALEbyte NA111-M Weak AuthenticationEPSS 0.5%CVE-2026-76940HIGHEbyte NA111-M Improper Restriction of Excessive Authentication AttemptsEPSS 0.5%CVE-2026-77966HIGHEbyte NA111-M Missing AuthorizationEPSS 0.4%