CVE-2026-122028 PUBLISHED

NST Labs Tech Nstbrowser Local Agent API info information disclosure

Assigner: VulDB
Reserved: 04.11.2026 Published: 04.11.2026 Updated: 04.11.2026

A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by this vulnerability is an unknown functionality of the file /agent/info of the component Local Agent API. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
CVSS Score: 5.3

Product Status

Vendor NST Labs Tech
Product Nstbrowser
Versions
  • Version 1.21.0 is affected

Credits

  • PoriaMs (VulDB User) reporter
  • VulDB CNA Team coordinator

References

Problem Types

  • Information Disclosure CWE
  • Improper Access Controls CWE