Skip to content
OpenAdvisories

Product · D-Link

Nuclias Connect

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-34253

    D-Link Nuclias Connect <= v1.3.1.4 Stored Cross-Site Scripting (XSS)

    D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain a stored cross-site scripting (XSS) vulnerability due to improper sanitization of the 'Network' field when editing the configuration, creating a profile, and adding a network. An authenticated attack…

    D-Link Nuclias Connect Network devices
  • Medium 6.9
    CVE-2025-34255

    D-Link Nuclias Connect <= v1.3.1.4 Forgot Password Account Enumeration

    D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Forgot Password' endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an ex…

    D-Link Nuclias Connect Network devices
  • Medium 6.9
    CVE-2025-34254

    D-Link Nuclias Connect <= v1.3.1.4 Login Account Enumeration

    D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Login' endpoint returns distinct JSON responses depending on whether the supplied username is associated with an existing account.…

    D-Link Nuclias Connect Network devices