CVE-2026-31850

Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+

State: Published
Severity: 6.8 Medium
Published: Mar 23, 2026
Updated: Aug 10, 2026
Reserved: Mar 9, 2026

Description

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration backup files. These backup files can be obtained through legitimate functionality or other weaknesses and do not apply encryption or hashing, allowing attackers to directly extract sensitive information.

Scores

CVSS	Score	Vector	Source
4.0	6.8 Medium	CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	TuranSec

Weaknesses

CWE-256 Plaintext Storage of a Password

Affected Products

Product	Versions
Nebula 300+Nexxt Solutions	<= 12.01.01.37Affected

References

https://www.nexxtsolutions.com/connectivity/internal-products/ARN02304U6/third-party-advisory
https://nexxt-connectivity-frontend.s3.amazonaws.com/media/docs/Nebula300+_v12.01.01.37.zipthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.