A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication or session-related information transmitted between a user and the affected device. Successful exploitation could result in disclosure of sensitive information and unauthorized access to device management functionality.

A cleartext transmission of sensitive information vulnerability has been identified in certain Ebyte gateway products. The web management interface lacks adequate transport-layer encryption, exposing sensitive communications to interception. An attacker with access to network traffic can intercept authentication credentials or session tokens exchanged between users and the affected device. Successful exploitation could lead to unauthorized access to device management functionality and disclosure of sensitive information. The vulnerability is tracked as CVE-2026-73809 and has been reported via NVD and CISA ICS advisory ICSA-26-237-06. It affects OT/ICS gateway devices, making it particularly relevant to critical infrastructure environments. Mitigation likely involves enabling TLS/HTTPS on the web management interface or applying vendor-supplied patches.