CVE-2026-73809: Ebyte NE2-D11 Cleartext Transmission of Sensitive Information
A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication or session-related information transmitted between a user and the affected device. Successful exploitation could result in disclosure of sensitive information and unauthorized access to device management functionality.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Organizations using the Ebyte NE2-D11 gateway with its web management interface are exposed where an attacker can access or observe the network traffic between administrators and the device.
What does an attacker need to exploit it?
The attacker needs access to relevant network traffic. No authentication, user interaction, or prior privileges are required according to the supplied severity vector.
What information or access could be obtained?
An attacker could intercept authentication or session-related information sent between a user and the device. This could disclose sensitive information and enable unauthorized access to device management functionality.