CVE-2026-75814

The Ebyte device does not adequately verify the origin or authenticity of requests submitted to the web management interface. An unauthenticated remote attacker could persuade an authenticated administrator to visit a crafted page, causing unauthorized configuration changes or a disruption of device availability.

  • Published Aug 28, 2026
  • CVSS 8.6 high
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-75814 at the National Vulnerability Database