Skip to content
OpenAdvisories
High · 7.5 CVE-2026-76945 EUVD-2026-67289GHSA-5733-jr78-jp2w

Ebyte NE2-D11 Use of Client-Side Authentication

Published Aug 27, 2026 · Updated Oct 5, 2026 · Assigned by icscert

Description

The affected Ebyte device relies on client-managed authentication tokens
without sufficient server-side validation. An attacker may replay or
manipulate authentication tokens to gain unauthorized access to
administrative functionality.

Affected products

VendorProductAffectedFixed
Ebyte Ebyte NE2-D11 Firmware FW-9167-0-11 —

Advisories 1

References