Nexxt Solutions Nebula 300+

• CVE-2026-31851 High 7.7 Nexxt Nebula 300+ - Lack of Rate Limiting Enables Brute-Force Attacks 0.3%
• CVE-2026-31850 Medium 6.8 Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+ 0.2%
• CVE-2026-31849 High 7.2 Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+ 0.1%
• CVE-2026-31848 High 8.7 Reversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+ 0.3%
• CVE-2026-31847 High 8.5 Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+ 0.4%