VULNERABILITY INTELLIGENCE
CVE-2026-77975
CVSS score6.5 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-08-31
Last modified2026-09-01
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
The affected Ebyte product exports administrative credentials and other sensitive configuration information without adequate protection. An unauthenticated attacker on the adjacent network who can obtain an exported configuration file could recover valid credentials and use them to access the device or similarly configured systems.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-312