Vulnerabilities

CVSS

4.6 Medium

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Risk score

36.8

Published

2026-08-27

Status

Published

Administrative credentials may be exposed in plaintext within the Ebyte device's management interface, increasing the risk of credential compromise through visual or remote observation. This undermines the confidentiality of device access.

Weaknesses

CWE-522

Coverage 1

vulnerability

Ebyte NE2-D11

A CISA advisory highlights critical vulnerabilities in Ebyte NE2-D11 devices, primarily due to a lack of consistent authentication enforcement and cleartext transmission of sensitive information. The vendor, Ebyte, has n…

CISA Advisories · 5d ago High

CVE-2026-73125CVE-2026-73809CVE-2026-73839CHvulnerabilityauthenticationencryption

All articles mentioning it

Advisories and references

• cisa.gov/news-events/ics-advisories/icsa-26-237-06
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...