CVE-2026-31847CWE-912

CVE-2026-31847

High · published March 23, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
53.2
In the wild
Unconfirmed
What it is

Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. By sending a crafted POST request with parameters such as telnetManageEn=true and telnetPwd, an authenticated attacker can activate a Telnet service on port 23.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00714 · 53.2th percentile
Weakness
CWE-912 · Hidden Functionality
Published
2026-03-23T17:16Z
Affected products (1)
ProductVersionsFixed in
nexxtsolutions/nebula300plus_firmware≤ 12.01.01.37—
References (2)
https://nexxt-connectivity-frontend.s3.amazonaws.com/media/docs/Nebula300+_v12.01.01.37.zip · 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2chttps://www.nexxtsolutions.com/connectivity/internal-products/ARN02304U6/ · 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
EPSS history
Timeline
  • 23 MAR 12:07Z
    Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+
    cvelistv5