CVE WatchAug 31, 2026

CVE-2026-73819

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's ide

CVSS

9.8

Critical

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Aug 31, 2026 · Last modified: Aug 31, 2026 · CWE-1390

EPSS · 30d

Not enough EPSS history yet.

Technical description

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials, potentially preventing legitimate administrators from managing the device.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-650988.1 HIG

45.1%

——14NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering.3d CVE-2026-680679.8 CRI

23.8%

——7The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control cloud accounts and access hormone record information and account settings.19d CVE-2026-591355.5 MED

24.4%

——7Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.15d CVE-2026-595547.5 HIG

35.6%

——11Unauthenticated Broken Authentication in Ziina <= 1.2.21 versions.39d CVE-2026-507567.5 HIG

41.2%

——12An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component40d CVE-2026-550409.1 CRI

98.5%

KEV—80Microsoft SharePoint Weak Authentication Vulnerability13d