CVE-2026-31847 Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+
An authenticated attacker can remotely enable Telnet on the device, potentially leading to code execution and privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-31847?
CVE-2026-31847 is a high-severity vulnerability in Nexxt Solutions Nebula 300+, published on 23 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. By sending a crafted POST request with parameters such as telnetManageEn=true and telnetPwd, an authenticated attacker can activate a Telnet service on port 23.
Weakness: CWE-912
Which versions are affected by CVE-2026-31847?
It affects 1 product.
Products include Nexxtsolutions Nebula300plus Firmware.
How do I fix CVE-2026-31847?
No fix has been published for CVE-2026-31847 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-31847 being exploited?
There is no known exploitation of CVE-2026-31847 in the wild and no public exploit code.
Other vulnerabilities in Nexxt Solutions Nebula 300+
- CVE-2026-31848 Reversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+
- CVE-2026-31851 Nexxt Nebula 300+ - Lack of Rate Limiting Enables Brute-Force Attacks
- CVE-2026-31849 Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+
- CVE-2026-31850 Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+
Sources
Also known as GHSA-892q-6j8f-3q9c.