Ebyte NE2-D11 Gateway Hit by 11 Vulnerabilities, No Patch Yet

**CISA disclosed 11 vulnerabilities in the Ebyte NE2-D11 industrial IoT gateway (FW-9167-0-11), four rated CVSS 9.8; flaws include weak or inconsistent authentication and cleartext MQTT credentials that could allow remote attackers to read or change configuration, hijack sessions, or seize full control.** No public exploitation or CVEs have been reported and no confirmed patch is available; CISA and the vendor have provided mitigation guidance such as removing gateways from the public internet, placing them behind firewalls, and using VPNs in line with ICS advisory ICSA-26-237-06.