THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-31847 (HIGH 8.8) — Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. By sending a crafted POST request with parameters such as telnetManageEn=true and telnetPwd, an authenticated

[NVD] CVE-2026-31847 (HIGH 8.8) — Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. By sending a crafted POST request with parameters such as telnetManageEn=true and telnetPwd, an authenticated

lownvdPublished 2026-03-23

CVE-2026-31847 CVSS: 8.8 HIGH Published: 2026-03-23T13:16:30.320

Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. By sending a crafted POST request with parameters such as telnetManageEn=true and telnetPwd, an authenticated attacker can activate a Telnet service on port 23.

Indicators of compromise

CVE-2026-31847cve
12.01.01.37ipv4

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-31847