CVE-2026-71187
Ebyte NA111-M Use of Client-Side Authentication
- State
- Published
- Severity
- 9.3 Critical
- Published
- Aug 27, 2026
- Updated
- Oct 5, 2026
- Reserved
- Aug 20, 2026
Description
The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass authentication to obtain administrative access to the device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | icscert |
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | icscert |
Weaknesses
- CWE-603 Use of Client-Side Authentication
Affected Products
| Product | Versions |
|---|---|
Ebyte NA111-M FirmwareEbyte |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.