CVE-2026-76133 CRITICAL

CVE-2026-76133: Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm

Vendor Ebyte
Product Ebyte NA111-M Firmware
Weakness CWE-327 · Broken crypto
Published August 31, 2026
Last update October 5, 2026

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditions where an attacker can manipulate or predict the authentication exchange, the weak construction may reduce the assurance provided by the authentication mechanism and facilitate unauthorized access.

Key dates

02Disclosure timeline

August 31, 2026 CVE published
October 5, 2026 Record updated