CRITICAL 9.3 NVD
CVE-2026-73819
The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain
The affected Ebyte
product's vendor configuration utility permits access to administrative
functions without verifying the operator's identity under certain
credential conditions. An unauthenticated attacker on the adjacent
network could modify critical settings or change access credentials,
potentially preventing legitimate administrators from managing the
device.
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-06.json
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06
This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-08-31 via NVD.
Risk Timeline
CVE Disclosed2026-08-31 · -1 days ago
Remediation Resources
vulnfeed aggregates 11540 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.