Ebyte Ebyte Ne2-D11 Firmware
11 CVEs affecting Ebyte Ebyte Ne2-D11 Firmware. Latest disclosed: 2026-08-28. Critical: 3, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76179 | Critical | 9.8 | 2026-08-28 | An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway products. Authentication tokens used by the web management inte… |
CVE-2026-73125 | Critical | 9.8 | 2026-08-28 | Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated… |
CVE-2026-69658 | Critical | 9.8 | 2026-08-28 | MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized de… |
CVE-2026-75814 | High | 8.8 | 2026-08-28 | The Ebyte device does not adequately verify the origin or authenticity of requests submitted to the web management interface. An unauthenticated remote attac… |
CVE-2026-77977 | High | 8.1 | 2026-08-28 | Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default c… |
CVE-2026-76945 | High | 7.5 | 2026-08-28 | The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate auth… |
CVE-2026-76940 | High | 7.5 | 2026-08-28 | The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This could allow an attacke… |
CVE-2026-75813 | High | 7.5 | 2026-08-28 | Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings… |
CVE-2026-73809 | High | 7.5 | 2026-08-28 | A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately pr… |
CVE-2026-75548 | Medium | 5.4 | 2026-08-28 | The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote at… |
CVE-2026-73839 | Medium | 4.6 | 2026-08-28 | Administrative credentials may be exposed in plaintext within the Ebyte device's management interface, increasing the risk of credential compromise through v… |