VULNERABILITY INTELLIGENCE
CVE-2026-73125
CVSS score9.8 CRITICAL
EPSS probability0.80%
CISA KEVNot currently listed
Published2026-08-28
Last modified2026-08-31
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-306