Nexxt Solutions Nebula 300+ up to 12.01.01.37 HTTP /goform/ate missing authentication

Summaryinfo

A vulnerability classified as critical has been found in Nexxt Solutions Nebula 300+ up to 12.01.01.37. Affected is an unknown function of the file /goform/ate of the component HTTP Handler. The manipulation leads to missing authentication. This vulnerability is referenced as CVE-2026-31846. The attack needs to be initiated within the local network. No exploit is available.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Nexxt Solutions Nebula 300+ up to 12.01.01.37. This issue affects some unknown processing of the file /goform/ate of the component HTTP Handler. The manipulation with an unknown input leads to a missing authentication vulnerability. Using CWE to declare the problem leads to CWE-306. The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. Impacted is confidentiality. The summary by CVE is:

Missing authentication in the /goform/ate endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows an adjacent unauthenticated attacker to retrieve sensitive device information, including the administrator password. The endpoint returns a raw response containing parameters such as Login_PW, which is Base64-encoded. An attacker can decode this value to obtain valid administrative credentials and authenticate to the device.

The weakness was published by Angel Barre. The advisory is shared at nexxtsolutions.com. The identification of this vulnerability is CVE-2026-31846 since 03/09/2026. Access to the local network is required for this attack to succeed. No form of authentication is needed for a successful exploitation. Technical details are known, but no exploit is available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-14402). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Nexxt Solutions

Name

• Nebula 300+

Version

• 12.01.01.0
• 12.01.01.1
• 12.01.01.2
• 12.01.01.3
• 12.01.01.4
• 12.01.01.5
• 12.01.01.6
• 12.01.01.7
• 12.01.01.8
• 12.01.01.9
• 12.01.01.10
• 12.01.01.11
• 12.01.01.12
• 12.01.01.13
• 12.01.01.14
• 12.01.01.15
• 12.01.01.16
• 12.01.01.17
• 12.01.01.18
• 12.01.01.19
• 12.01.01.20
• 12.01.01.21
• 12.01.01.22
• 12.01.01.23
• 12.01.01.24
• 12.01.01.25
• 12.01.01.26
• 12.01.01.27
• 12.01.01.28
• 12.01.01.29
• 12.01.01.30
• 12.01.01.31
• 12.01.01.32
• 12.01.01.33
• 12.01.01.34
• 12.01.01.35
• 12.01.01.36
• 12.01.01.37

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion