CVE-2026-31851 Nexxt Nebula 300+ - Lack of Rate Limiting Enables Brute-Force Attacks
Attackers can brute-force administrative credentials on Nexxt Nebula 300+ devices due to missing rate limiting, leading to potential account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-31851?
CVE-2026-31851 is a high-severity missing authorization vulnerability in Nexxt Solutions Nebula 300+, published on 23 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement rate limiting or account lockout mechanisms on authentication interfaces. An attacker can perform unlimited authentication attempts against endpoints that rely on credential validation, enabling brute-force attacks to guess administrative credentials without restriction.
Weakness: CWE-307
Which versions are affected by CVE-2026-31851?
It affects 1 product.
Products include Nexxtsolutions Nebula300plus Firmware.
How do I fix CVE-2026-31851?
No fix has been published for CVE-2026-31851 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-31851 being exploited?
There is no known exploitation of CVE-2026-31851 in the wild and no public exploit code.
Other vulnerabilities in Nexxt Solutions Nebula 300+
- CVE-2026-31848 Reversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+
- CVE-2026-31847 Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+
- CVE-2026-31849 Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+
- CVE-2026-31850 Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+
Sources
Also known as GHSA-v8rr-whp7-p37j.