PT-2026-82794

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality...

PT-2026-82792

Name of the Vulnerable Software and Affected Versions Ebyte NE2-D11 affected versions not specified Description The device fails to restrict repeated authentication attempts because it lacks rate limiting or account lockout mechanisms. This deficiency allows attackers to conduct automated...

CVE-2026-76940: Improper Restriction of Excessive Authentication Attempts

The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This could allow an attacker to perform automated authentication attacks against deployments that rely on password based authentication...