https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:05:04.432758+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-31848 CVE-2026-31848 — Reversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+ 2026-10-08T18:05:04.450623+00:00

Affected: Nexxt Solutions Nebula 300+

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 uses the ecos_pw cookie for authentication, which contains Base64-encoded credential data combined with a static suffix. Because the encoding is reversible and lacks integrity protection, an attacker can reconstruct or forge a valid cookie value without proper authentication.