{"id":"CVE-2026-73839","revision":"bf4f5c936c0d4cdabc497bb99cff19d5","records":[{"revision":"bf4f5c936c0d4cdabc497bb99cff19d5","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-73839","aliases":[],"title":"Ebyte NE2-D11 Insufficiently Protected Credentials","description":"Administrative credentials may be exposed in plaintext within the Ebyte \ndevice's management interface, increasing the risk of credential \ncompromise through visual or remote observation. This undermines the \nconfidentiality of device access.","state":0,"publishedAt":"2026-08-27T21:18:13.771+00:00","modifiedAt":"2026-10-05T19:28:49.882+00:00","affected":[{"ecosystem":"Vendor product","name":"Ebyte NE2-D11 Firmware","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Ebyte\",\n                    \"product\": \"Ebyte NE2-D11 Firmware\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"FW-9167-0-11\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":4.6,"severity":"MEDIUM"},{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","score":5.1,"severity":"MEDIUM"}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06","https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-06.json"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-73839","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-73839","identifiers":["CVE-2026-73839"]},"retained":false,"historicalAffected":[]}],"coverage":[]}