CVE-2026-77975: high-severity vulnerability in Ebyte NE2-D11 Firmware
Ebyte NA111-M Cleartext Storage of Sensitive Information
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1epss 0.2%
The affected Ebyte
product exports administrative credentials and other
sensitive configuration information without adequate protection. An
unauthenticated attacker on the adjacent network who can obtain an
exported configuration file could recover valid credentials and use them
to access the device or similarly configured systems.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Ebyte · Ebyte NE2-D11 FirmwareRelated CVEs — Ebyte NE2-D11 Firmware
In the same product, most dangerous first.