Vulnerability Details CVE-2026-31848
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 uses the ecos_pw cookie for authentication, which contains Base64-encoded credential data combined with a static suffix. Because the encoding is reversible and lacks integrity protection, an attacker can reconstruct or forge a valid cookie value without proper authentication. This allows unauthorized administrative access to protected endpoints.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.7%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2026-31848
-
cpe:2.3:h:nexxtsolutions:nebula300plus:-
-
cpe:2.3:o:nexxtsolutions:nebula300plus_firmware:*