Web Management Interface Vulnerability in Ebyte Device
CVE-2026-75814

8.6HIGH

Key Information:

Vendor

Ebyte

Status
Ebyte Ne2-d11 Firmware
Vendor
CVE Published:
27 August 2026

What is CVE-2026-75814?

The Ebyte device is susceptible to an improper authentication vulnerability that compromises the web management interface. This allows an unauthenticated remote attacker to craft malicious pages, tricking an authenticated administrator into making unauthorized configuration changes. This manipulation can lead to significant disruptions in the availability of the device, posing a serious security risk. It is crucial for users to be aware of this flaw and take protective measures.

Affected Version(s)

Ebyte NE2-D11 Firmware FW-9167-0-11

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jithin Nambiar reported this vulnerability to CISA.
.