What is CVE-2026-77977?

CVE-2026-77977 is a high-severity vulnerability in Ebyte Ne2-D11 Firmware, classified under Missing Authentication for Critical Function. CVSS score: 8.1/10. Published 2026-08-28.

How severe is CVE-2026-77977?

High severity. CVSS v3 base score is 8.1 out of 10.

Auth bypass in Ebyte Ne2-D11 Firmware

CVE-2026-77977

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings, resulting in a loss of configuration and service availability.

Vulnerability class: Broken Authentication

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.

Affected products

Ebyte Ne2-d11 Firmware — versions FW-9167-0-11

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

Frequently asked questions

What is CVE-2026-77977?: CVE-2026-77977 is a high-severity vulnerability in Ebyte Ne2-D11 Firmware, classified under Missing Authentication for Critical Function. CVSS score: 8.1/10. Published 2026-08-28.
How severe is CVE-2026-77977?: High severity. CVSS v3 base score is 8.1 out of 10.