Nexxtsolutions Nebula300Plus Firmware — CVE-2026-31851 (Critical)

Date Mar 23, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product Nexxtsolutions · Nebula300Plus Firmware

CVE CVE-2026-31851

Critical vendor advisory CVE-2026-31851

Summary

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement rate limiting or account lockout mechanisms on authentication interfaces. An attacker can perform unlimited authentication attempts against endpoints that rely on credential validation, enabling brute-force attacks to guess administrative credentials without restriction.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.8) in Nexxtsolutions Nebula300Plus Firmware. Patch or mitigate promptly.

Operator check

Review CVE-2026-31851 in your asset inventory. Apply patches per vendor guidance and verify Nebula300Plus Firmware is not exposed. CVSS score: 9.8.

Sources

NVD — CVE-2026-31851 Vendor reference Vendor reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed