Nexxt Solutions
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Nebula 300+ | 5 | – | Mar 23, 2026 |
| Nebula 300+ / Tenda F3 V2.0 Firmware | 1 | – | Mar 23, 2026 |
Exploited and recent CVEs
- CVE-2026-31851 Nexxt Nebula 300+ - Lack of Rate Limiting Enables Brute-Force Attacks 0.3%
- CVE-2026-31850 Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+ 0.2%
- CVE-2026-31849 Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+ 0.1%
- CVE-2026-31848 Reversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+ 0.3%
- CVE-2026-31847 Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+ 0.4%
- CVE-2026-31846 Unauthenticated Credential Disclosure via /goform/ate in Nexxt Nebula 300+ 0.3%