Description
MQTT credentials and control traffic are transmitted in cleartext,
exposing sensitive information to network-level attackers. This may
enable unauthorized device impersonation and disruption of messaging
functions.
Published: 2026-08-27
Score: 9.3 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

In the Ebyte NE2-D11 firmware, MQTT credentials and control traffic are transmitted in cleartext, which allows an attacker to capture sensitive data, authenticate as the device, and potentially disrupt messaging functions. This weakness falls under CWE-319, exposing both confidentiality and integrity of the device communication.

Affected Systems

The vulnerability affects the Ebyte NE2-D11 firmware. No specific firmware version information is provided, and the vendor has not yet released a patch.

Risk and Exploitability

The CVSS score of 9.3 indicates a critical severity. The EPSS score is currently unavailable, so the exact exploitation probability is uncertain, but the lack of encryption makes this a low-cost vector for network‑level attackers who can sniff traffic. The vulnerability is not listed in the CISA KEV catalog, suggesting no known exploitation yet, yet the broad network exposure keeps the risk high.

Generated by OpenCVE AI on August 28, 2026 at 07:05 UTC.

Remediation

Vendor Workaround

Ebyte acknowledged receipt of the reported vulnerabilities and indicated that a patch was under development. However, the vendor has not responded to subsequent requests for coordination, and CISA has not been informed of the status or availability of the patch. Users are encouraged to reach out to Ebyte for more information.

OpenCVE Recommended Actions

  • When a vendor patch becomes available, apply it promptly.
  • Configure MQTT on the device to use TLS or another encryption mechanism to protect credentials and control messages.
  • Implement network segmentation or a VPN so the device is isolated from untrusted networks and reduce the attacker’s ability to sniff MQTT traffic.
  • Monitor for unencrypted MQTT traffic and block or alert on such activity.

Generated by OpenCVE AI on August 28, 2026 at 07:05 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 28 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Ebyte
Ebyte ebyte Ne2-d11 Firmware
Vendors & Products Ebyte
Ebyte ebyte Ne2-d11 Firmware

Fri, 28 Aug 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 27 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Description MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions.
Title Ebyte NE2-D11 Cleartext Transmission of Sensitive Information
Weaknesses CWE-319
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Ebyte Ebyte Ne2-d11 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2026-08-28T14:13:51.549Z

Reserved: 2026-08-10T16:03:40.505Z

Link: CVE-2026-69658

cve-icon Vulnrichment

Updated: 2026-08-28T14:04:45.381Z

cve-icon NVD

Status : Received

Published: 2026-08-28T00:18:08.650

Modified: 2026-08-28T16:18:21.460

Link: CVE-2026-69658

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T16:13:27Z

Weaknesses
  • CWE-319

    Cleartext Transmission of Sensitive Information