CVE Catalog
CVE-2026-71187
CriticalCVSS 9.8Summary
The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass authentication to obtain administrative access to the device.
Risk Assessment
An attacker can gain full administrative access to the device, potentially leading to complete device and network compromise.
Recommendation
Move authentication logic to the server side and implement strong authentication mechanisms.
Original NVD description (English source)
The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass authentication to obtain administrative access to the device.