CVE-2026-122028: medium-severity vulnerability in Nstbrowser
NST Labs Tech Nstbrowser Local Agent API info information disclosure
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
30Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.3
A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by this vulnerability is an unknown functionality of the file /agent/info of the component Local Agent API. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
NST Labs Tech · Nstbrowserpublic PoCs found — 1
cve_referencedrive.google.com/drive/folders/135l_IZU955OmUNC5so83IiixlPPJp5X1unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Nstbrowser
In the same product, most dangerous first.
References
https://drive.google.com/drive/folders/135l_IZU955OmUNC5so83IiixlPPJp5X1https://drive.google.com/drive/folders/135l_IZU955OmUNC5so83IiixlPPJp5X1?usp=drive_linkhttps://vuldb.com/cve/CVE-2026-122028https://vuldb.com/submit/1025065https://vuldb.com/vuln/431091https://vuldb.com/vuln/431091/cti