CVE-2026-76945: Ebyte NE2-D11 Use of Client-Side Authentication
Published Aug 27, 2026
·Updated
The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality.
Affected Software
1 affected component
Ebyte NE2-D11
Event History
Aug 27, 2026
CVE Published
via MITRE·09:35 PM
Data Sourced
via MITRE·09:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is remotely exploitable over the network and requires neither prior authentication nor user interaction. An attacker able to reach the affected device's management interface could attempt to replay or manipulate authentication tokens.
2
What access could an attacker gain?
Successful exploitation may provide unauthorized access to administrative functionality on the Ebyte NE2-D11. The provided severity vector indicates a high confidentiality impact, while integrity and availability impacts are not indicated.