CVE-2026-77975CWE-312

CVE-2026-77975

Medium · published August 31, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

The affected Ebyte

product exports administrative credentials and other

sensitive configuration information without adequate protection. An

unauthenticated attacker on the adjacent network who can obtain an

exported configuration file could recover valid credentials and use them

to access the device or similarly configured systems.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
7.1 · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00181 · 7.3th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2026-08-31T20:19Z
References (2)
EPSS history
Timeline
  • 02 SEP 03:39Z
    EPSS moved — → 0%
    epss
  • 31 AUG 15:26Z
    Ebyte NA111-M Cleartext Storage of Sensitive Information
    cvelistv5