CVE-2026-31847

Published: Mar 23, 2026 Last Modified: Mar 23, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,5
Source: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
Attack Vector: adjacent
Attack Complexity: low
Privileges Required: high
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. Once enabled, the service exposes a privileged diagnostic management interface over the network, increasing the attack surface and enabling further compromise of the device.

912

Hidden Functionality

Incomplete
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Other Integrity
Potential Impacts:
Varies By Context Alter Execution Logic
Applicable Platforms
Technologies: Not Technology-Specific, ICS/OT
View CWE Details
https://nexxt-connectivity-frontend.s3.amazonaws.com/media/…
https://nexxt-connectivity-frontend.s3.amazonaws.com/media/docs/Nebula300+_v12.…
https://www.nexxtsolutions.com/connectivity/internal-produc…
https://www.nexxtsolutions.com/connectivity/internal-products/ARN02304U6/