{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-122028","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","state":"PUBLISHED","assignerShortName":"VulDB","dateReserved":"2026-11-04T14:46:43.503Z","datePublished":"2026-11-04T22:15:18.816Z","dateUpdated":"2026-11-04T22:15:18.816Z"},"containers":{"cna":{"providerMetadata":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-11-04T22:15:18.816Z"},"title":"NST Labs Tech Nstbrowser Local Agent API info information disclosure","problemTypes":[{"descriptions":[{"type":"CWE","cweId":"CWE-200","lang":"en","description":"Information Disclosure"}]},{"descriptions":[{"type":"CWE","cweId":"CWE-284","lang":"en","description":"Improper Access Controls"}]}],"affected":[{"vendor":"NST Labs Tech","product":"Nstbrowser","versions":[{"version":"1.21.0","status":"affected"}],"cpes":["cpe:2.3:a:nst_labs_tech:nstbrowser:*:*:*:*:*:*:*:*"],"modules":["Local Agent API"]}],"descriptions":[{"lang":"en","value":"A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by this vulnerability is an unknown functionality of the file /agent/info of the component Local Agent API. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:C"}}],"timeline":[{"time":"2026-11-04T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-11-04T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-11-04T15:51:48.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"PoriaMs (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}],"references":[{"url":"https://vuldb.com/vuln/431091","name":"VDB-431091 | NST Labs Tech Nstbrowser Local Agent API info information disclosure","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/431091/cti","name":"VDB-431091 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-122028","name":"CVE-2026-122028 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/1025065","name":"Submit #1025065 | https://www.nstbrowser.io/en \tnstbroswer  1.21.0 sensitive logic exposure leading to fingerprint broswer track","tags":["third-party-advisory"]},{"url":"https://drive.google.com/drive/folders/135l_IZU955OmUNC5so83IiixlPPJp5X1?usp=drive_link","tags":["related"]},{"url":"https://drive.google.com/drive/folders/135l_IZU955OmUNC5so83IiixlPPJp5X1","tags":["exploit"]}],"x_generator":["VulDB PVTS v202611"]}}}