CVE-2026-75548: Ebyte NE2-D11 Improper Restriction of Rendered UI Layers or Frames
The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a crafted webpage to mislead an authenticated administrator into initiating unintended configuration changes or disruptive actions.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Organizations with Ebyte NE2-D11 devices whose web management interfaces are reachable by administrators are exposed. Exploitation targets an authenticated administrator rather than requiring the attacker to authenticate directly to the device.
What does an attacker need to exploit it?
The attacker needs to deliver a crafted webpage to an authenticated administrator and persuade them to interact with it. The attack can be performed remotely and does not require attacker privileges, but it requires user interaction.
What could indicate an attempted or successful attack?
Review device configuration and administrative action records for changes or disruptive actions that administrators did not intend to perform. Because the attack relies on misleading an authenticated administrator, unexpected changes following visits to untrusted webpages warrant investigation.