CVE-2026-122028

Deferred Deferred - Pending Action

Information Disclosure in NST Labs Tech Nstbrowser

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: VulDB

Description

A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by this vulnerability is an unknown functionality of the file /agent/info of the component Local Agent API. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-11-04

Last Modified

2026-11-04

Generated

2026-11-05

AI Q&A

2026-11-05

EPSS Evaluated

N/A

NVD

CVE-2026-122028

Affected Vendors & Products

Vendor	Product	Version / Range
NST Labs Tech	Nstbrowser	1.21.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is an information disclosure issue in NST Labs Tech Nstbrowser 1.21.0. It affects the Local Agent API's /agent/info endpoint, allowing remote attackers to access sensitive data without authentication. The exploit is public and the vendor did not respond to disclosure attempts.

Impact Analysis

An attacker could remotely access confidential information through the affected API endpoint. This may lead to unauthorized data exposure, privacy breaches, or further exploitation depending on the disclosed information.

Compliance Impact

This vulnerability could violate data protection regulations like GDPR or HIPAA by exposing personal or sensitive data. Organizations using the affected software may face compliance penalties, legal liabilities, and reputational damage due to unauthorized data disclosure.

Mitigation Strategies

Immediately restrict access to the /agent/info endpoint of the Local Agent API component in NST Labs Tech Nstbrowser 1.21.0. Ensure network segmentation to limit exposure and monitor for unusual information disclosure attempts.

Hi! I’m here to help you understand CVE-2026-122028. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...