CVE-2026-76940: Ebyte NE2-D11 Improper Restriction of Excessive Authentication Attempts
Published Aug 27, 2026
·Updated
The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This could allow an attacker to perform automated authentication attacks against deployments that rely on password based authentication.
Affected Software
1 affected component
Ebyte NE2-D11
Event History
Aug 27, 2026
CVE Published
via MITRE·09:28 PM
Data Sourced
via MITRE·09:28 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are most exposed to this issue?
Deployments that rely on password-based authentication are exposed to automated authentication attacks because repeated attempts are not restricted by rate limiting or account lockout.
2
What does an attacker need to exploit it?
The issue can be exploited remotely over the network with low attack complexity. No privileges or user interaction are required.