Nexxt Solutions

Products

ProductCVEsExploitedLatest
Nebula 300+5–Mar 23, 2026
Nebula 300+ / Tenda F3 V2.0 Firmware1–Mar 23, 2026

Exploited and recent CVEs

  • CVE-2026-31851 High 7.7 Nexxt Nebula 300+ - Lack of Rate Limiting Enables Brute-Force Attacks 0.3%
  • CVE-2026-31850 Medium 6.8 Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+ 0.2%
  • CVE-2026-31849 High 7.2 Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+ 0.1%
  • CVE-2026-31848 High 8.7 Reversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+ 0.3%
  • CVE-2026-31847 High 8.5 Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+ 0.4%
  • CVE-2026-31846 Medium 6.5 Unauthenticated Credential Disclosure via /goform/ate in Nexxt Nebula 300+ 0.3%