CVE-2026-73809

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication or session-related information transmitted between a user and the affected device. Successful exploitation could result in disclosure of sensitive information and unauthorized access to device management functionality.

  • Published Aug 28, 2026
  • CVSS 8.7 high
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-73809 at the National Vulnerability Database