CVE-2026-31850 Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+
Attackers can extract plaintext admin credentials and WiFi keys from configuration backups, leading to unauthorized access and data exposure.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-31850?
CVE-2026-31850 is a medium-severity vulnerability in Nexxt Solutions Nebula 300+, published on 23 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration backup files. These backup files can be obtained through legitimate functionality or other weaknesses and do not apply encryption or hashing, allowing attackers to directly extract sensitive information.
Weakness: CWE-256
Which versions are affected by CVE-2026-31850?
It affects 1 product.
Products include Nexxtsolutions Nebula300plus Firmware.
How do I fix CVE-2026-31850?
No fix has been published for CVE-2026-31850 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-31850 being exploited?
There is no known exploitation of CVE-2026-31850 in the wild and no public exploit code.
Other vulnerabilities in Nexxt Solutions Nebula 300+
- CVE-2026-31848 Reversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+
- CVE-2026-31847 Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+
- CVE-2026-31851 Nexxt Nebula 300+ - Lack of Rate Limiting Enables Brute-Force Attacks
- CVE-2026-31849 Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+
Sources
Also known as GHSA-hp8q-2fwx-rfc5.