Which versions of Ebyte NE2-D11 are affected by CVE-2026-73809?

Cleartext credential transmission in Ebyte NE2-D11 industrial gateway management interfaces exposes administrative credentials to any attacker with network access, enabling unauthorized device…

How to fix or mitigate CVE-2026-73809?

Within 24 hours, inventory all Ebyte NE2-D11 gateways in your environment and map network access patterns to these devices. Within 7 days, implement network segmentation to restrict management interface access, deploy encrypted tunnels (TLS proxy or VPN) for all administrative traffic to these gateways, rotate all gateway management credentials, and enforce strong password policies for new accounts. Within 30 days, contact Ebyte directly to confirm patch timeline and availability, establish continuous monitoring for firmware updates and security advisories, and evaluate replacement with gateway hardware that implements encrypted credential transmission by default.

Ebyte NE2-D11 CVE-2026-73809

Q: What is the CVSS score of CVE-2026-73809?

CVE-2026-73809 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-67280 HIGH

Cleartext Transmission of Sensitive Information (CWE-319)

2026-08-27 icscert

GHSA-54gv-56r8-hcmv

Authentication Bypass Ebyte Ne2 D11 Firmware

8.7

CVSS 4.0 · Vendor: icscert

Severity by source

Vendor (icscert) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.9 MEDIUM

AC:H reflects the requirement for network traffic interception positioning; C:H for full credential disclosure; I and A are N as this is passive eavesdropping with no direct modification or disruption.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (icscert).

CVSS VectorVendor: icscert

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Aug 28, 2026 - 00:52 vuln.today

v3 (cvss_changed)

Analysis Updated

Aug 28, 2026 - 00:50 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 28, 2026 - 00:22 vuln.today

cvss_changed

CVSS changed

Aug 28, 2026 - 00:22 NVD

7.5 (HIGH) 8.7 (HIGH)

Analysis Generated

Aug 27, 2026 - 23:59 vuln.today

CVE Published

Aug 27, 2026 - 21:15 cve.org

HIGH 7.5

DescriptionCVE.org

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication or session-related information transmitted between a user and the affected device. Successful exploitation could result in disclosure of sensitive information and unauthorized access to device management functionality.

AnalysisAI

Cleartext transmission of authentication and session credentials in the Ebyte NE2-D11 gateway web management interface exposes credentials to any attacker capable of intercepting network traffic between a user and the device. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H) reflects that no authentication is required on the attacker side - only network traffic access is needed to harvest management credentials, which then enable full unauthorized access to device management functionality. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	The attacker must be capable of intercepting HTTP traffic between a client workstation and the NE2-D11 management interface - achievable by being on the same Layer 2 network segment, executing ARP cache poisoning, or compromising an upstream switch or router. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 score of 8.7 with AV:N/AC:L/AT:N/PR:N/UI:N/VC:H reflects vendor and CISA consensus that this is straightforward network-level exploitation with high confidentiality impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Consult the CISA ICS advisory ICSA-26-237-06 at https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06 for vendor-recommended mitigations; no specific patched firmware version is confirmed from available data, so a vendor-released patch cannot be cited. … Detailed patch versions, workarounds, and compensating controls in full report.