What is CVE-2026-31850?

CVE-2026-31850 is a medium-severity vulnerability in Nexxt Solutions Nebula 300+, classified under Plaintext Storage of a Password. CVSS score: 4.9/10. Published 2026-03-23.

How severe is CVE-2026-31850?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Vulnerability in Nexxt Solutions Nebula 300+

CVE-2026-31850

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration backup files. These backup files can be obtained through legitimate functionality or other weaknesses and do not apply encryption or hashing, allowing attackers to directly extract sensitive information.

EPSS: 0.002 (7.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.

Affected products

Nexxt Solutions Nebula 300+ — versions <= 12.01.01.37
Nexxtsolutions Nebula300plus
Nexxtsolutions Nebula300plus_firmware

Weakness classification (CWE)

CWE-256 — Plaintext Storage of a Password

References

309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c (Product, third-party-advisory)
309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c (Product, third-party-advisory)

Frequently asked questions

What is CVE-2026-31850?: CVE-2026-31850 is a medium-severity vulnerability in Nexxt Solutions Nebula 300+, classified under Plaintext Storage of a Password. CVSS score: 4.9/10. Published 2026-03-23.
How severe is CVE-2026-31850?: Medium severity. CVSS v3 base score is 4.9 out of 10.