CVE-2026-31850

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-31850
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration backup files. These backup files can be obtained through legitimate functionality or other weaknesses and do not apply encryption or hashing, allowing attackers to directly extract sensitive information.

4.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://nexxt-connectivity-frontend.s3.amazonaws.com/media/docs/Nebula300+_v12.01.01.37.zip Product
https://www.nexxtsolutions.com/connectivity/internal-products/ARN02304U6/ Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:nexxtsolutions:nebula300plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nexxtsolutions:nebula300plus:-:*:*:*:*:*:*:*
History

29 Apr 2026, 17:39

Type Values Removed Values Added
CPE cpe:2.3:o:nexxtsolutions:nebula300plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:nexxtsolutions:nebula300plus:-:*:*:*:*:*:*:*
First Time Nexxtsolutions nebula300plus Firmware
Nexxtsolutions
Nexxtsolutions nebula300plus
References () https://nexxt-connectivity-frontend.s3.amazonaws.com/media/docs/Nebula300+_v12.01.01.37.zip - () https://nexxt-connectivity-frontend.s3.amazonaws.com/media/docs/Nebula300+_v12.01.01.37.zip - Product
References () https://www.nexxtsolutions.com/connectivity/internal-products/ARN02304U6/ - () https://www.nexxtsolutions.com/connectivity/internal-products/ARN02304U6/ - Product
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.9

26 Mar 2026, 11:16

Type Values Removed Values Added
Summary
  • (es) El firmware de Nexxt Solutions Nebula 300+ hasta la versión 12.01.01.37 almacena información sensible, incluyendo credenciales administrativas y claves precompartidas de WiFi, en texto plano dentro de los archivos de copia de seguridad de configuración exportados.
Summary (en) Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration backup files. (en) Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration backup files. These backup files can be obtained through legitimate functionality or other weaknesses and do not apply encryption or hashing, allowing attackers to directly extract sensitive information.

23 Mar 2026, 13:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-23 13:16

Updated : 2026-04-29 17:39

NVD link : CVE-2026-31850

Mitre link : CVE-2026-31850

CVE.ORG link : CVE-2026-31850

JSON object : View

Products Affected

nexxtsolutions

  • nebula300plus_firmware
  • nebula300plus
CWE
CWE-256

Plaintext Storage of a Password