Read the docs

Nexxt Solutions

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Nexxt Solutions records in CISA KEV

No Nexxt Solutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nebula300plus Firmware 5 records LOW Amp300 Firmware 1 record HIGH Nebula1200-ac Firmware 1 record MEDIUM

Records

5 records in Nebula300plus Firmware · all components

TI-2026-24401 CVE-2026-31848 · GHSA-7xw4-69gx-5gch

Reversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+

Priority LOW 39

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 uses the ecos_pw cookie for authentication, which contains Base64-encoded credential data combined with a static suffix.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00295 Published 2026-03-23 No fix listed CWE-312
TI-2026-24404 CVE-2026-31851 · GHSA-v8rr-whp7-p37j

Nexxt Nebula 300+ - Lack of Rate Limiting Enables Brute-Force Attacks

Priority LOW 36

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement rate limiting or account lockout mechanisms on authentication interfaces.

CVSS 4.0HIGH 7.7 Adjacent network No auth No interaction EPSS 0.00349 Published 2026-03-23 No fix listed CWE-307
TI-2026-24402 CVE-2026-31849 · GHSA-fgpp-3hfm-jqqh

Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+

Priority LOW 36

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement CSRF protections on state-changing endpoints such as /goform/setSysTools and other administrative interfaces.

CVSS 4.0HIGH 7.2 Network No auth User interaction EPSS 0.00121 Published 2026-03-23 No fix listed CWE-352
TI-2026-24403 CVE-2026-31850 · GHSA-hp8q-2fwx-rfc5

Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+

Priority LOW 29

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration backup files.

CVSS 4.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00186 Published 2026-03-23 No fix listed CWE-256
Open these records in search →