CVE-2026-122020Medium· 4.3▾ SunlitA security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. The affected element is the function stopAllBrowsers of the file /api/agent/browser/stopAll of the component Local Agent Management Service. Performing a manipu…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. The affected element is the function stopAllBrowsers of the file /api/agent/browser/stopAll of the component Local Agent Management Service. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Nstbrowser 1.2.0Nstbrowser 1.2.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-122028Medium· 4.3NST Labs Tech Nstbrowser Local Agent API info information disclosure
CVE-2018-8120High· 7.0An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Serve…
CVE-2020-3555Medium· 6.8A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affecte…
CVE-2026-123964Medium· 4.3OpenBMB Internet of Agents Collaboration Layer communication_layer.py launch_goal infinite loop
CVE-2026-123748Medium· 4.3chenyme grok2api WebSocket Proxy voice_ws_handler.go proxyVoiceWebSocket resource consumption
CVE-2026-120237Medium· 4.3ag-ui-protocol ag-ui Interrupt expiry index.ts isInterruptExpired resource consumption