Vulnerability Description
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration backup files. These backup files can be obtained through legitimate functionality or other weaknesses and do not apply encryption or hashing, allowing attackers to directly extract sensitive information.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nexxtsolutions | Nebula300Plus Firmware | <= 12.01.01.37 |
| Nexxtsolutions | Nebula300Plus | - |
Related Weaknesses (CWE)
References
- https://nexxt-connectivity-frontend.s3.amazonaws.com/media/docs/Nebula300+_v12.0Product
- https://www.nexxtsolutions.com/connectivity/internal-products/ARN02304U6/Product
FAQ
What is CVE-2026-31850?
CVE-2026-31850 is a vulnerability with a CVSS score of 4.9 (MEDIUM). Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration...
How severe is CVE-2026-31850?
CVE-2026-31850 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-31850?
Check the references section above for vendor advisories and patch information. Affected products include: Nexxtsolutions Nebula300Plus Firmware, Nexxtsolutions Nebula300Plus.