THREAT OPS › Threat News › [NVD] CVE-2026-31846 (MEDIUM 6.5) — Missing authentication in the /goform/ate endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows an adjacent unauthenticated attacker to retrieve sensitive device information, including the administrator password. An attacker can decode this value to
[NVD] CVE-2026-31846 (MEDIUM 6.5) — Missing authentication in the /goform/ate endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows an adjacent unauthenticated attacker to retrieve sensitive device information, including the administrator password. An attacker can decode this value to
CVE-2026-31846 CVSS: 6.5 MEDIUM Published: 2026-03-23T12:16:07.267
Missing authentication in the /goform/ate endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows an adjacent unauthenticated attacker to retrieve sensitive device information, including the administrator password. An attacker can decode this value to obtain valid administrative credentials and authenti
MITRE ATT&CK techniques
- CredentialsT1589.001
Indicators of compromise
- CVE-2026-31846cve
- 12.01.01.37ipv4
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-31846