CVE-2026-122020— NST Labs Tech Nstbrowser Local Agent Management Service stopAll stopAllBrowsers denial of service

Quick assessment

Affected

NST Labs Tech Nstbrowser

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 NST Labs 的 Tech Nstbrowser 软件（版本 1.2.1 及更早版本）中发现了一个安全漏洞。受影响的组件是“本地代理服务管理”（Local Agent Management Service）中的接口，具体涉及函数。攻击者可通过操纵该接口触发拒绝服务（DoS）攻击。该漏洞可被远程利用，且利用代码已公开，可能被用于实际攻击。漏洞披露方已尽早联系厂商，但厂商未作出任何回应。

CVSS 4.3 · Medium Updated Nov 05, 2026

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

NST Labs Tech Nstbrowser Local Agent Management Service stopAll stopAllBrowsers denial of service

Source: CVE Program / CVE List V5

Vulnerability Description

A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. The affected element is the function stopAllBrowsers of the file /api/agent/browser/stopAll of the component Local Agent Management Service. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Source: CVE Program / CVE List V5