CVE-2026-73125: Ebyte NE2-D11 Missing Authentication for Critical Function
Published Aug 27, 2026
·Updated
Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability.
Event History
Aug 27, 2026
CVE Published
via MITRE·09:13 PM
Data Sourced
via MITRE·09:13 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploiting this issue require credentials, user interaction, or local network access?
No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required. An unauthenticated remote attacker can target the web management interface.