CVE-2026-75814: Cross-Site Request Forgery (CSRF)

The Ebyte device does not adequately verify the origin or authenticity of requests submitted to the web management interface. An unauthenticated remote attacker could persuade an authenticated administrator to visit a crafted page, causing unauthorized configuration changes or a disruption of...

PT-2026-82794

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality...

CVE-2026-71187: Use of Client-Side Authentication

The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass authentication to obtain administrative access to the device...

PT-2026-82790

Name of the Vulnerable Software and Affected Versions Ebyte NE2-D11 affected versions not specified Description The web management interface fails to properly verify the origin or authenticity of submitted requests. This allows an unauthenticated remote attacker to trick an authenticated...

EUVD-2023-55392

Malicious code in bioql PyPI...

CVE-2023-50614

An issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information via crafted POST request to /cgi-bin/luci...

CVE-2023-50614

An issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information via crafted POST request to /cgi-bin/luci...

CVE-2023-50614

An issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information via crafted POST request to /cgi-bin/luci...

Design/Logic Flaw

An issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information via crafted POST request to /cgi-bin/luci...

CVE-2023-50614

CVE-2023-50614 affects EBYTE E880-IR01-V1.1 (router). A vulnerability in the /cgi-bin/luci POST handling could allow an attacker to obtain sensitive information, per multiple sources (NVD/Red Hat/CNNVD variants). The CVSSv3.1 vector indicates Network access, Low auth, No user interaction, with Co...

EBYTE E880-IR01 Security Vulnerability

EBYTE E880-IR01 is a 4G wireless router from EBYTE, China. A security vulnerability exists in EBYTE E880-IR01 version V1.1. An attacker can exploit this vulnerability to obtain sensitive information via a specially crafted /cgi-bin/luci POST request...

CVE-2023-50614: Cleartext Transmission of Sensitive Information

An issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information via crafted POST request to /cgi-bin/luci...

CVE-2023-50614

An issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information via crafted POST request to /cgi-bin/luci...

CVE-2023-50614

An issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information via crafted POST request to /cgi-bin/luci...