CVE-2026-71187

CVSS 9.8 (critical) · published 2026-08-28

The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass authentication to obtain administrative access to the device.

Weakness: CWE-603

Source: NVD CVE-2026-71187

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-06.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.