All 5 CVE vulnerabilities found in Nebula 300+, with AI-generated Chinese analysis, references, and POCs.
Vendor: Nexxt Solutions
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-31851 | Nexxt Nebula 300+ - Lack of Rate Limiting Enables Brute-Force Attacks CWE-307 | 7.7 | High | 2026-03-23 |
| CVE-2026-31850 | Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+ CWE-256 | 6.8 | Medium | 2026-03-23 |
| CVE-2026-31849 | Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+ CWE-352 | 7.2 | High | 2026-03-23 |
| CVE-2026-31848 | Reversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+ CWE-312 | 8.7 | High | 2026-03-23 |
| CVE-2026-31847 | Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+ CWE-912 | 8.5 | High | 2026-03-23 |
All 5 known CVE vulnerabilities affecting Nebula 300+ with full Chinese analysis, references, and POCs where available.