D-Link Nuclias Connect vulnerabilities

3 CVEs affecting D-Link Nuclias Connect, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-34255, published 2025-10-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-34255, published 2025-10-16. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Forgot Password' endpoint returns distinct JSON responses depending on…
CVE-2025-34254, published 2025-10-16. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Login' endpoint returns distinct JSON responses depending on whether…
CVE-2025-34253, published 2025-10-16. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain a stored cross-site scripting (XSS) vulnerability due to improper sanitization of the 'Network' field when editing the configuration,…