CVE-2026-73125
CriticalCVSS 9.8Summary
The Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability.
Risk Assessment
An attacker can gain unauthorized access to device configuration, potentially leading to confidentiality, integrity, and availability breaches.
Recommendation
Enforce mandatory authentication for all administrative functions and restrict access to the management interface.
Original NVD description (English source)
Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability.