CVE-2026-77977

Name of the Vulnerable Software and Affected Versions Ebyte gateway product (affected versions not specified)

Description The vendor configuration utility fails to require authentication for certain disruptive administrative actions when default credentials are still in use. This allows an unauthenticated attacker on the adjacent network to reboot the device or restore factory settings, leading to a loss of configuration and service availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Change the default credentials of the vendor configuration utility to prevent unauthenticated access.