VulnSocial

CVE-2026-73125Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 2 mentions (2026-08-28); latest day: 1
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-08-28: 2Mentions · 2026-08-29: 1Mentions · 2026-08-31: 1Patch / Workaround · 2026-08-28: 1Patch / Workaround · 2026-08-29: 1Technical Details · 2026-08-28: 1Technical Details · 2026-08-29: 1Technical Details · 2026-08-31: 108-2808-2908-31
Signal classification3 categories
Disclosure
250.0%
General
125.0%
Patch
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-08-282
Disclosure1General1
2026-08-291
Patch1
2026-08-311
Disclosure1
Full discourse4 posts
  • Dark Web Informer@DarkWebInformer
    Disclosure

    🚨 Critical CVE-2026-73125 impacts Ebyte NE2-D11 devices A critical missing-authentication vulnerability in the Ebyte NE2-D11 web management interface could allow a remote, unauthenticated attacker to access administrative functionality. CVE-2026-73125 carries a CVSS 3.1 score of 9.8 and requires no privileges or user interaction. Successful exploitation could allow attackers to: • Access sensitive configuration data • Modify device settings • Disrupt device availability Affected firmware: FW-9167-0-11 Ebyte indicated a patch was under development, but CISA says it has not been informed of the patch's current availability. No confirmed active exploitation has been reported at this time. CISA: https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06

    Post summary

    A high‑severity CVE-2026-73125 has been announced for the Ebyte NE2‑D11, with no patch yet available and no confirmed exploitation in the wild.

    2301038.7K
    241.7K followersView on X
  • ThreatWire@ThreatWire_
    Patch

    🚨 CRITICAL: CISA warns of multiple vulnerabilities in Ebyte NA111-M industrial gateways, including CVE-2026-73125. The affected 9013-2-17 firmware contains a series of authentication, authorization, CSRF, information disclosure and other security flaws that could allow attackers to fully compromise the device. 🔴 CISA recommends removing these devices from Internet exposure, placing them behind firewalls and isolating control-system networks. ⚠️ No known public exploitation targeting these vulnerabilities has been reported to CISA at this time. 🔗 https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 #CISA #Ebyte #ICS #IoT #CVE #CyberSecurity #CriticalInfrastructure #Infosec

    Post summary

    CISA has issued an advisory for critical flaws in Ebyte NA111-M gateways, urging removal or secure isolation of devices, with no active exploitation reported.

    00021425
    1.7K followersView on X
  • CVETodo@CveTodo
    Disclosure

    A cluster of critical vulnerabilities in Ebyte's NA111-M firmware — including CVE-2026-73125, a missing-authentication flaw rated 9. 8 out of 10 on the CVSS scale — could allow unauthenticated... https://cvetodo.com/news/critical-flaws-in-ebyte-na111-m-firmware-expose-industrial-devices-to-full-compromise-cisa-warns #Ebyte #AuthBypass #CriticalVulnerability #CVE #InfoSec https://t.co/7zevUOoitz

    Post summary

    The tweet announces a cluster of critical missing‑authentication vulnerabilities in Ebyte's NA111‑M firmware, including CVE-2026-73125, without providing PoC, exploit tools, or patch information.

    0000034
    19 followersView on X
  • Daily CyberSecurity@Daily_CyberSec
    General

    Critical Ebyte NA111-M vulnerabilities like CVE-2026-73125 could allow attackers to fully compromise the device. Review CISA guidance and mitigations. #Ebyte #NA111M #CISA #Vulnerability #Cybersecurity #CVE202673125 https://securityonline.info/ebyte-na111-m-vulnerabilities/

    Post summary

    The tweet warns of a critical CVE-2026-73125 affecting Ebyte NA111-M devices and directs readers to review CISA guidance, but it lacks technical specifics, PoC, exploit code, or patch details.

    00000521
    12.9K followersView on X

Explore more

Back to dashboard