Improper Authentication in Ebyte Gateway Configuration Utility

CVE-2026-77977

What is CVE-2026-77977?

The Ebyte gateway configuration utility lacks necessary authentication protocols, enabling an attacker on the adjacent network to execute critical administrative tasks. When default credentials are not changed, unauthorized users can reboot the device or restore it to factory settings, leading to a complete loss of configuration and disruption of service availability. This vulnerability highlights the importance of changing default credentials and securing administrative interfaces to prevent unauthorized access.

References