Vulnerability · Published Mar 23, 2026 · Assigned by TuranSec
CVE-2026-31850Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+
Medium 6.8
In plain English
A medium-severity security flaw in Nebula 300+ from Nexxt Solutions. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Official description
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration backup files. These backup files can be obtained through legitimate functionality or other weaknesses and do not apply encryption or hashing, allowing attackers to directly extract sensitive information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Nexxt Solutions | Nebula 300+ | <= 12.01.01.37 |
Weakness: CWE-256 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
References
- https://www.nexxtsolutions.com/connectivity/internal-products/ARN02304U6/ third-party-advisory
- https://nexxt-connectivity-frontend.s3.amazonaws.com/media/docs/Nebula300+_v12.01.01.37.zip third-party-advisory