CVE-2026-31851Disclosure(nexxtsolutions / nebula300plus)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement rate limiting or account lockout mechanisms on authentication interfaces. An attacker can perform unlimited authentication attempts against endpoints that rely on credential validation, enabling brute-force attacks to guess administrative credentials without restriction.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-307

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • nebula300plus
  • nebula300plus_firmware

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Products
nebula300plusnebula300plus_firmware

1 version affected across 2 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-23: 2Technical Details · 2026-03-23: 203-23
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-31851 Nexxt Solutions Nebula 300+ Firmware Authentication Bypass via Brute-Force Attack https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31851

    Post summary

    The post announces CVE-2026-31851, describing an authentication bypass via brute‑force in Nexxt Solutions Nebula firmware, but provides no PoC, exploit code, or patch details.

    0000055
    4.0K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-31851 - Lack of rate limiting allows brute-force attacks in Nexxt Nebula 300+ Intel Report: https://ift.tt/K0NLGtP

    Post summary

    The alert announces CVE‑2026‑31851, noting its lack of rate limiting that permits brute‑force attacks on Nexxt Nebula 300+ devices, but provides no PoC, exploit code, or patch information.

    00000184
    289 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWnexxtsolutionsnebula300plus---
OSnexxtsolutionsnebula300plus_firmware---

Explore more