{"uuid": "37454c4a-dcd8-4429-918b-2aab9b0ad2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73125", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117174234105795513", "content": "\ud83d\udea8 Critical CVE-2026-73125 impacts Ebyte NE2-D11 devices\nA critical missing-authentication vulnerability in the Ebyte NE2-D11 web management interface could allow a remote, unauthenticated attacker to access administrative functionality.\nCVE-2026-73125 carries a CVSS 3.1 score of 9.8 and requires no privileges or user interaction. Successful exploitation could allow attackers to:\n\u2022 Access sensitive configuration data\u2022 Modify device settings\u2022 Disrupt device availability\nAffected firmware: FW-9167-0-11\nEbyte indicated a patch was under development, but CISA says it has not been informed of the patch's current availability. No confirmed active exploitation has been reported at this time.\nCISA: https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06", "creation_timestamp": "2026-08-28T17:08:42.331380Z"}