CVE-2026-73809

Deferred Deferred - Pending Action

Cleartext Transmission Vulnerability in Ebyte Gateway Web Interface

Publication date: 2026-08-28

Last updated on: 2026-08-31

Assigner: ICS-CERT

Description

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication or session-related information transmitted between a user and the affected device. Successful exploitation could result in disclosure of sensitive information and unauthorized access to device management functionality.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-31

Generated

2026-09-17

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-73809

EUVD

EUVD-2026-67280

Affected Vendors & Products

Vendor	Product	Version / Range
ebyte	gateway	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-319	The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Attack-Flow Graph

Executive Summary

This vulnerability involves cleartext transmission of sensitive information in certain Ebyte gateway products. The web management interface does not properly protect sensitive communications with transport-layer encryption. Attackers with network access could intercept authentication or session data, leading to unauthorized access or information disclosure.

Detection Guidance

This vulnerability involves cleartext transmission of sensitive information in Ebyte gateway products. To detect it, monitor network traffic for unencrypted HTTP sessions to the gateway's web management interface. Use packet capture tools like tcpdump or Wireshark to inspect traffic for plaintext credentials or session tokens. Check if the device's web interface defaults to HTTP instead of HTTPS.

Impact Analysis

An attacker could intercept sensitive data like login credentials or session tokens, allowing unauthorized access to device management functions. This could lead to configuration changes, data exposure, or disruption of device operations if exploited.

Compliance Impact

This vulnerability may violate compliance requirements for protecting sensitive data in transit, such as GDPR's encryption mandates or HIPAA's safeguards for electronic protected health information. Failure to encrypt communications could result in non-compliance penalties.

Mitigation Strategies

Immediately restrict network access to the gateway's web interface by isolating it behind a firewall or using a VPN for remote access. Disable any exposed administrative interfaces if possible. Contact Ebyte for patch availability and apply updates once released. Monitor network traffic for suspicious activity related to this device.

Hi! I’m here to help you understand CVE-2026-73809. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70