CVE-2026-31846

🗓️ 23 Mar 2026 12:00:42Reported by TuranSecType

cve🔗 web.nvd.nist.gov👁 8 Views🌐 WEB

Unauthenticated access to /goform/ate in Nexxt Nebula 300+ firmware exposes admin password in Base64 via HTTP.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2026-31846	23 Mar 202612:00	–	attackerkb
CNNVD	Nexxt Solutions Nebula 300+ 安全漏洞	23 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-31846 Unauthenticated Credential Disclosure via /goform/ate in Nexxt Nebula 300+	23 Mar 202612:00	–	cvelist
EUVD	EUVD-2026-14402	23 Mar 202612:30	–	euvd
NVD	CVE-2026-31846	23 Mar 202612:16	–	nvd
Positive Technologies	PT-2026-27112	23 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-31846	26 Mar 202614:58	–	redhatcve
Vulnrichment	CVE-2026-31846 Unauthenticated Credential Disclosure via /goform/ate in Nexxt Nebula 300+	23 Mar 202612:00	–	vulnrichment

[
  {
    "vendor": "Nexxt Solutions",
    "product": "Nebula 300+ / Tenda F3 V2.0 Firmware",
    "versions": [
      {
        "status": "affected",
        "version": "<= 12.01.01.37"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
nexxtsolutions	www.nexxtsolutions.com/connectivity/internal-products/ARN02304U6/
nexxt-connectivity-frontend	www.nexxt-connectivity-frontend.s3.amazonaws.com/media/docs/Nebula300+_v12.01.01.37.zip

Parameter	Position	Path	Description	CWE
Login_PW	nested	/goform/ate	Missing authentication allows retrieval of sensitive device information via /goform/ate; Login_PW is present in response and is Base64-encoded, enabling attacker to obtain admin credentials.	CWE-306

17 Jun 2026 10:34Current

5.8Medium risk

Vulners AI Score5.8

CVSS 26.1

CVSS 3.16.5

CVSS 47.1

EPSS0.0025

SSVC

CWE-306