CVE-2026-31850

Published: Mar 23, 2026 Last Modified: Mar 23, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,8
Source: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
Attack Vector: adjacent
Attack Complexity: low
Privileges Required: high
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration backup files.

256

Plaintext Storage of a Password

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Gain Privileges Or Assume Identity
Applicable Platforms
Technologies: ICS/OT
Likelihood of Exploit: High
View CWE Details
https://nexxt-connectivity-frontend.s3.amazonaws.com/media/…
https://nexxt-connectivity-frontend.s3.amazonaws.com/media/docs/Nebula300+_v12.…
https://www.nexxtsolutions.com/connectivity/internal-produc…
https://www.nexxtsolutions.com/connectivity/internal-products/ARN02304U6/