โ† Back to all CVEs

CVE-2026-31847

UNKNOWN NVD
CVSS Score 0
Severity UNKNOWN
Published Mar 23, 2026
Vendor unknown

Description

Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. Once enabled, the service exposes a privileged diagnostic management interface over the network, increasing the attack surface and enabling further compromise of the device.

References