https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:18:29.747198+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349578 EUVD-2026-349578 2026-10-08T03:18:29.799404+00:00 EUVD-2026-349578 https://cve.radiocsirt.org/vuln/fkie_cve-2026-31847 fkie_cve-2026-31847 2026-10-08T03:18:29.799452+00:00

Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. By sending a crafted POST request with parameters such as telnetManageEn=true and telnetPwd, an authenticated attacker can activate a Telnet service on port 23.

 https://cve.radiocsirt.org/vuln/ghsa-892q-6j8f-3q9c GHSA-892q-6j8f-3q9c 2026-10-08T03:18:29.799506+00:00

Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. Once enabled, the service exposes a privileged diagnostic management interface over the network, increasing the attack surface and enabling further compromise of the device.