CVE-2026-76133
Received Received - Intake

Authentication Bypass in Ebyte Product via Weak Hashing

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: ICS-CERT

Description
The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related operation. Under conditions where an attacker can manipulate or predict the authentication exchange, the weak construction may reduce the assurance provided by the authentication mechanism and facilitate unauthorized access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-31
Last Modified
2026-08-31
Generated
2026-08-31
AI Q&A
2026-08-31
EPSS Evaluated
N/A
NVD
CVE-2026-76133
EUVD
EUVD-2026-68612

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-327 The product uses a broken or risky cryptographic algorithm or protocol.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects an Ebyte product that uses a deprecated hashing algorithm during authentication. If an attacker can manipulate or predict the authentication process, the weak hashing may weaken security and allow unauthorized access to the system.

Impact Analysis

An attacker could exploit this to bypass authentication, gain unauthorized access, or manipulate the system. This may lead to data breaches, system disruption, or full control over the affected device depending on the attacker's goals.

Mitigation Strategies

Minimize network exposure for affected systems by isolating them behind firewalls. Use secure remote access methods like VPNs. Implement cybersecurity best practices for industrial control systems. Contact Ebyte for patch availability and additional guidance.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76133. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart