CVE-2026-31851
Lack of Rate Limiting Enables Brute-Force Attacks in Nexxt Nebula 300+
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.7EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
23 mar 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement rate limiting or account lockout mechanisms on authentication interfaces. An attacker can perform unlimited authentication attempts against endpoints that rely on credential validation, enabling brute-force attacks to guess administrative credentials without restriction.
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Nexxt Solutions · Nebula 300+¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →