by Kastro
Paper/Archive/CVE-2026-76133

CVE-2026-76133

Ebyte Ebyte NA111-M Firmware — Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 33.8.338 × 206.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditions where an attacker can manipulate or predict the authentication exchange, the weak construction may reduce the assurance provided by the authentication mechanism and facilitate unauthorized access.

Affected

ProductAffectedFixed inSource
Ebyte NA111-M Firmware9013-2-17–CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-26-237-06refgithub.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-06.json