CVE-2026-73809: Ebyte NA111-M Firmware

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication or session-related information transmitted between a user and the affected device. Successful exploitation could result in disclosure of sensitive information and unauthorized access to device management functionality.

Affected products

• Ebyte Ebyte NA111-M Firmware: version 9013-2-17 only

Published 2026-08-28. Last modified 2026-08-31.