Approved changes feed: RSS · Atom

cpe:2.3:a:nexxt_solutions:nebula_300+_/_tenda_f3_v2.0_firmware:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNexxt Solutions (47297251-f581-5d7d-8d65-b036ecce1a59)
ProductNebula 300+ / Tenda F3 V2.0 Firmware (e9698f9b-9247-5c71-9bfd-b4e7fdd2ef54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-31846 vulnerable 2026-06-08 07:57:15.972760 Unauthenticated Credential Disclosure via /goform/ate in Nexxt Nebula 300+
MEDIUM (6.5)
Missing authentication in the /goform/ate endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows an adjacent unauthenticated attacker to retrieve sensitive device information, including the administrator password. An attacker can decode this value to obtain valid administrative credentials and authenticate to the device.
Published: 2026-03-23T12:00:42.158Z
Updated: 2026-08-10T11:43:37.664Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.