CVE-2026-73819: Ebyte NA111-M Firmware

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials, potentially preventing legitimate administrators from managing the device.

Affected products

• Ebyte Ebyte NA111-M Firmware: version 9013-2-17 only

Published 2026-08-31. Last modified 2026-09-01.