CVE-2026-75548

Name of the Vulnerable Software and Affected Versions Ebyte NE2-D11 (affected versions not specified)

Description The web management interface of the device fails to restrict the interface from being rendered within an external frame. This allows an unauthenticated remote attacker to use a crafted webpage to trick an authenticated administrator into performing unintended configuration changes or disruptive actions through a clickjacking attack, where a user is deceived into clicking something different from what they perceive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.