CVE-2026-76179: CWE-598 in Ebyte Ebyte NA111-M Firmware

CVE-2026-76179 is a vulnerability classified under CWE-598 affecting the Ebyte NA111-M Firmware version 9013-2-17. The flaw arises from improper protection of authentication tokens in the device's web management interface. An attacker with access to session information can reuse valid authentication tokens, bypassing authentication controls and gaining unauthorized access to device management functions. This vulnerability has a CVSS 3.1 base score of 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an unauthenticated attacker to reuse valid authentication tokens to access and control device management functions remotely. This can lead to full compromise of the device's management interface, potentially affecting device operation and security.

Patch status is not yet confirmed — no official fix or patch links are provided. Users should monitor the vendor's advisory for updates and apply any official patches once available. Until then, restrict access to the device's web management interface to trusted networks and users only to reduce exposure.