← Database

CVE-2026-31847

HIGH CVSS: 8.8 Published: 2026-03-23 Modified: 2026-08-10

Description

Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. By sending a crafted POST request with parameters such as telnetManageEn=true and telnetPwd, an authenticated attacker can activate a Telnet service on port 23.

Affected Platforms

Nexxtsolutions Nebula300PlusNexxtsolutions Nebula300Plus Firmware

Weakness Type

CWE-912

References