Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. By sending a crafted POST request with parameters such as telnetManageEn=true and telnetPwd, an authenticated attacker can activate a Telnet service on port 23.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2026-31847 Nexxt Solutions Nebula 300+ Firmware Telnet Service Unauthorized Remote Enablement https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31847
Post summary
The text announces CVE-2026-31847, noting unauthorized remote enablement of Telnet in Nexxt Solutions Nebula firmware, but provides no proof of exploitation or remediation details.
There is a new vulnerability with elevated criticality in Nexxt Solutions Nebula 300+ (CVE-2026-31847) https://vuldb.com/?id.352506
Post summary
A new critical vulnerability (CVE-2026-31847) has been disclosed for Nexxt Solutions Nebula 300+. The post references a VULDB page for more details, but no exploit, patch, or technical specifics are provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | nexxtsolutions | nebula300plus | - | - | - |
| OS | nexxtsolutions | nebula300plus_firmware | - | - | - |