CVE-2026-31850 describes a vulnerability in Nexxt Solutions Nebula 300+ firmware versions <=12.01.01.37 where sensitive information including administrative credentials and WiFi pre-shared keys are stored in plaintext within exported configuration backup files. These backup files can be obtained through legitimate device functionality or other weaknesses. The lack of encryption or hashing on these files allows attackers with access to the backups to directly extract sensitive information. The vulnerability is classified under CWE-256 (Plaintext Storage of a Password). The CVSS 4.0 base score is 6.8, indicating a medium severity with attack vector being adjacent network and requiring high privileges.

An attacker who can obtain the exported configuration backup files can directly access sensitive administrative credentials and WiFi pre-shared keys in plaintext. This exposure could lead to unauthorized administrative access to the device and compromise of the wireless network. The vulnerability requires high privileges and access to the adjacent network, limiting the attack surface but still posing a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict access to the device's configuration backup functionality and protect backup files from unauthorized access. Monitor for vendor advisories for updates on remediation or patches.