news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-73125

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
9.8 Critical
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Risk score
78.4
Published
2026-08-27
Status
Published

Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability.

Weaknesses

CWE-306

Coverage 2

Advisories and references