CVE-2026-73839— Ebyte NE2-D11 Insufficiently Protected Credentials
Quick assessment
Affected
Ebyte Ebyte NE2-D11 Firmware
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
管理凭据可能以明文形式暴露在 Ebyte 设备的管理界面中，从而增加了通过肉眼观察或远程观察导致凭据泄露的风险。这破坏了设备访问的机密性。
Possible ATT&CK Techniques 1 AI
T1552 · Unsecured Credentials
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-73839
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ebyte NE2-D11 Insufficiently Protected Credentials
Source: CVE Program / CVE List V5
Vulnerability Description
Administrative credentials may be exposed in plaintext within the Ebyte
device's management interface, increasing the risk of credential
compromise through visual or remote observation. This undermines the
confidentiality of device access.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的凭证保护机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Ebyte | Ebyte NE2-D11 Firmware | FW-9167-0-11 | - |
|
II. Public POCs for CVE-2026-73839
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-73839
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-73839 (1)
Same Patch Batch · Ebyte · 2026-08-27 · 12 CVEs total
| CVE-2026-71187 | 9.8 CRITICAL | Ebyte NE2-D11 Use of Client-Side Authentication |
| CVE-2026-69658 | 9.8 CRITICAL | Ebyte NE2-D11 Cleartext Transmission of Sensitive Information |
| CVE-2026-76179 | 9.8 CRITICAL | Ebyte NE2-D11 Use of GET Request Method With Sensitive Query Strings |
| CVE-2026-73125 | 9.8 CRITICAL | Ebyte NE2-D11 Missing Authentication for Critical Function |
| CVE-2026-75814 | 8.8 HIGH | Ebyte NE2-D11 Cross-Site Request Forgery |
| CVE-2026-77977 | 8.1 HIGH | Ebyte NE2-D11 Missing Authentication for Critical Function |
| CVE-2026-75813 | 7.5 HIGH | Ebyte NE2-D11 Missing Authorization |
| CVE-2026-76940 | 7.5 HIGH | Ebyte NE2-D11 Improper Restriction of Excessive Authentication Attempts |
| CVE-2026-76945 | 7.5 HIGH | Ebyte NE2-D11 Use of Client-Side Authentication |
| CVE-2026-73809 | 7.5 HIGH | Ebyte NE2-D11 Cleartext Transmission of Sensitive Information |
| CVE-2026-75548 | 5.4 MEDIUM | Ebyte NE2-D11 Improper Restriction of Rendered UI Layers or Frames |
IV. Related Vulnerabilities
Same product: Ebyte NE2-D11 Firmware
-
CVE-2026-77977
Ebyte NE2-D11 Missing Authentication for Critical Function -
CVE-2026-69658
Ebyte NE2-D11 Cleartext Transmission of Sensitive Informatio -
CVE-2026-76945
Ebyte NE2-D11 Use of Client-Side Authentication -
CVE-2026-75813
Ebyte NE2-D11 Missing Authorization -
CVE-2026-75548
Ebyte NE2-D11 Improper Restriction of Rendered UI Layers or
Same vendor: Ebyte
-
CVE-2026-77977
Ebyte NE2-D11 Missing Authentication for Critical Function -
CVE-2026-69658
Ebyte NE2-D11 Cleartext Transmission of Sensitive Informatio -
CVE-2026-76945
Ebyte NE2-D11 Use of Client-Side Authentication -
CVE-2026-75813
Ebyte NE2-D11 Missing Authorization -
CVE-2026-75548
Ebyte NE2-D11 Improper Restriction of Rendered UI Layers or
Same weakness: CWE-522
V. Comments for CVE-2026-73839
No comments yet