{"id":"CVE-2026-75814","revision":"e2ca77fe118b492ebe6a507a261ad226","records":[{"revision":"e2ca77fe118b492ebe6a507a261ad226","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-75814","aliases":[],"title":"Ebyte NA111-M Cross-Site Request Forgery","description":"The Ebyte device does not adequately verify the origin or authenticity of \nrequests submitted to the web management interface. An unauthenticated \nremote attacker could persuade an authenticated administrator to visit a\n crafted page, causing unauthorized configuration changes or a \ndisruption of device availability.","state":0,"publishedAt":"2026-08-27T21:25:36.709+00:00","modifiedAt":"2026-10-05T19:21:33.592+00:00","affected":[{"ecosystem":"Vendor product","name":"Ebyte NA111-M Firmware","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Ebyte\",\n                    \"product\": \"Ebyte NA111-M Firmware\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"9013-2-17\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":8.8,"severity":"HIGH"},{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":8.6,"severity":"HIGH"}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06","https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-06.json"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-75814","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-75814","identifiers":["CVE-2026-75814"]},"retained":false,"historicalAffected":[]}],"coverage":[]}