Skip to main content
CRITICAL

CVE-2026-73819

CVSS v3

9.8

CRITICAL

EPSS Score

0.5 %

exploit probability, as of 2026-09-28

CISA KEV

No

known exploited

Exploitation

—

SSVC status

Description

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials, potentially preventing legitimate administrators from managing the device.

Technical details

Published
2026-08-31
Last Modified
2026-09-01

Frequently asked questions

What is CVE-2026-73819?

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials, potentially preventing legitimate administrators from managing the device.

Is CVE-2026-73819 actively exploited?

Active exploitation of CVE-2026-73819 has not been confirmed. Its EPSS score was 0.5% on 2026-09-28, the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2026-73819?

CVE-2026-73819 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2026-73819 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

No credit card required · 500 free checks/month · Free API key