{"vulnerability": "CVE-2026-7312", "sightings": [{"uuid": "4b9be060-e9e0-4385-9ab6-b545d4f56321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73125", "type": "seen", "source": "https://t.me/CyberDispatch/2760", "content": "Critical CVE-2026-73125 impacts Ebyte NE2-D11 devices\n\nA critical missing-authentication vulnerability in the Ebyte NE2-D11 web management interface could allow a remote, unauthenticated attacker to access administrative functionality.\n\nCVE-2026-73125 carries a CVSS 3.1 score of 9.8 and requires no privileges or user interaction. Successful exploitation could allow attackers to:\n\n\u2022 Access sensitive configuration data\n\u2022 Modify device settings\n\u2022 Disrupt device availability\n\nAffected firmware: FW-9167-0-11", "creation_timestamp": "2026-08-30T00:00:39.079064Z"}, {"uuid": "85ff71b6-babb-410f-ba72-e24cfab9cb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73122", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msuhc7z5vi2b", "content": "\ud83d\udfe0 CVE-2026-73122 - High (7.7)\n\nA flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Manage...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73122/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T06:01:12.180901Z"}, {"uuid": "12d4f854-b7b0-42d3-b685-ee860b782e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7312", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnd6h2hiip2w", "content": "CVE-2026-7312 - Critical credential leak in Progress Sitefinity. Unauthenticated remote attacker obtains plain-text credentials. CVSS 10. Patch unknown. Disable Sitefinity Insight integration if not needed. #CVE #infosec #Sitefinity\n\nhttps://www.valtersit.com/cve/CVE-2026-7312/", "creation_timestamp": "2026-06-02T18:01:35.798231Z"}, {"uuid": "62e87994-d3c8-41b0-8d0c-581db63ceaa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7312", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mndz7plsio22", "content": "\ud83d\udd34 CVE-2026-7312 - Critical (10)\n\nCWE\u2011522: Insufficiently Protected Credentials in web services in Progress Sitefinity version fr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7312/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-03T02:00:40.992843Z"}, {"uuid": "ea43c369-2d31-429c-bc9d-ce289ef66a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7312", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnhtxadf6s2y", "content": "\ud83d\udccc CVE-2026-7312 - CWE\u2011522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, ... https://www.cyberhub.blog/cves/CVE-2026-7312", "creation_timestamp": "2026-06-04T14:37:07.803426Z"}, {"uuid": "db7183bd-2101-4f19-9907-d3375e146440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7312", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-552", "content": "", "creation_timestamp": "2026-06-05T10:19:13.000000Z"}, {"uuid": "b36202d8-228e-4963-b12a-31cf26ad72f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73125", "type": "seen", "source": "https://t.me/CyberDispatch/2760", "content": "Critical CVE-2026-73125 impacts Ebyte NE2-D11 devices\n\nA critical missing-authentication vulnerability in the Ebyte NE2-D11 web management interface could allow a remote, unauthenticated attacker to access administrative functionality.\n\nCVE-2026-73125 carries a CVSS 3.1 score of 9.8 and requires no privileges or user interaction. Successful exploitation could allow attackers to:\n\n\u2022 Access sensitive configuration data\n\u2022 Modify device settings\n\u2022 Disrupt device availability\n\nAffected firmware: FW-9167-0-11", "creation_timestamp": "2026-08-29T20:00:04.334952Z"}, {"uuid": "fff7169e-4c21-40a6-9e9f-62d67a5c596b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73125", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xcjolo72c", "content": "~Cisa~\nCritical flaws enable unauthenticated administrative access and device disruption; no patch or known exploitation.\n-\nIOCs: CVE-2026-73125, CVE-2026-71187, CVE-2026-69658\n-\n#CVE #ICS #ThreatIntel", "creation_timestamp": "2026-08-29T13:12:09.510352Z"}, {"uuid": "60cb5c55-a4e8-4544-a664-271c09b52c60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73125", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7ycmiamf24", "content": "CVE-2026-73125\nThe web management page of Ebyte devices does not always require a login before showing or allowing changes to important settings. This means someone on the network could view configuration details, alter how\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T13:30:06.235367Z"}, {"uuid": "8947425d-14f4-4cda-9824-9f984df32c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73125", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05", "content": "", "creation_timestamp": "2026-08-27T16:15:19.060113Z"}, {"uuid": "3373a872-cabc-4749-9515-254798e6e018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73125", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4bqmmzmx2c", "content": "\ud83d\udea8 CVE-2026-73125 \u2014 CVSS 9.3 CRITICAL\n\nEbyte device web management interface does not consistently enforce authentication before granting access t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73125\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T02:08:20.798465Z"}, {"uuid": "7c4759a8-8345-4c30-835b-d7d77cede4e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73125", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu5thkq6ga2y", "content": "Critical Ebyte NA111-M vulnerabilities like CVE-2026-73125 could allow attackers to fully compromise the device. Review CISA guidance and mitigations.\n\n#Ebyte #NA111M #CISA #Vulnerability #Cybersecurity #CVE202673125", "creation_timestamp": "2026-08-28T16:58:04.676386Z"}, {"uuid": "37454c4a-dcd8-4429-918b-2aab9b0ad2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73125", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117174234105795513", "content": "\ud83d\udea8 Critical CVE-2026-73125 impacts Ebyte NE2-D11 devices\nA critical missing-authentication vulnerability in the Ebyte NE2-D11 web management interface could allow a remote, unauthenticated attacker to access administrative functionality.\nCVE-2026-73125 carries a CVSS 3.1 score of 9.8 and requires no privileges or user interaction. Successful exploitation could allow attackers to:\n\u2022 Access sensitive configuration data\u2022 Modify device settings\u2022 Disrupt device availability\nAffected firmware: FW-9167-0-11\nEbyte indicated a patch was under development, but CISA says it has not been informed of the patch's current availability. No confirmed active exploitation has been reported at this time.\nCISA: https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06", "creation_timestamp": "2026-08-28T17:08:42.331380Z"}]}