CVE-2026-122020

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 61/100
Published: 2026-11-04 Modified: 2026-11-09 First seen: 2026-11-04 Status: active

Attack Surface

Network Low Complexity No Auth

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Passive
AT: None
VC: None
VI: None
VA: Low

Description

A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. The affected element is the function stopAllBrowsers of the file /api/agent/browser/stopAll of the component Local Agent Management Service. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness Classification (1)

Affected Software (6)

Bug Bounty Relevance

61 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

5.3 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

EPSS — Exploitation Probability

0.32%
Raw Score 0.003190
Percentile 25.3%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00319
2026-11-13
0.00319
2026-11-12
0.00319
2026-11-10
0.00319
2026-11-09
0.00319
2026-11-08
0.00319
2026-11-07
0.00319
2026-11-06
0.00319
2026-11-05
0.00319

Intelligence Sources

mitre ref →
nvd ref →