CVE-2026-75814
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
The Ebyte device does not adequately verify the origin or authenticity of requests submitted to the web management interface. An unauthenticated remote attacker could persuade an authenticated administrator to visit a crafted page, causing unauthorized configuration changes or a disruption of device availability.
Risk Assessment
The risk includes the possibility of CSRF attacks, potentially leading to unauthorized configuration changes or device unavailability.
Recommendation
It is recommended to implement CSRF protections such as anti-CSRF tokens and verify request origin.
Original NVD description (English source)
The Ebyte device does not adequately verify the origin or authenticity of requests submitted to the web management interface. An unauthenticated remote attacker could persuade an authenticated administrator to visit a crafted page, causing unauthorized configuration changes or a disruption of device availability.