A vulnerability described as critical has been identified in Nexxt Solutions Nebula 300+ up to 12.01.01.37. This impacts an unknown function of the file /goform/ate of the component HTTP Handler. Executing a manipulation can lead to missing authentication.

The identification of this vulnerability is CVE-2026-31846. The attack needs to be done within the local network. There is no exploit available.