Product Library / Garage & Access

Research profile · last verified 2026-08-13

Nexx Smart Wi-Fi Garage Door Controller (NXG-300)

Compiled by SmartHomeWorkflow Research · Nexx · Garage & Access · ~$79.99 ($79.99 on the maker's own store, re-read 2026-08-13: available, and the store shows no struck-through original, so this is the list price and not a promotion. Unchanged since 2026-07-19. The two predecessor models named in the federal advisory, NXG-100B and NXG-200, are still sold out. The stored figure was a rounded $80 until 2026-08-13.)

⚠ Similar names, different products: Nexx and Nexxt are two unrelated companies, and the near-collision reaches every place a buyer would go to check this product. This device is made by SimpalTek, LLC under the Nexx name. Nexxt Solutions is a separate networking brand. In the US App Store the Nexx Home app (SimpalTek) sits beside 'Nexxt Home' (Software Brokers of America) and 'Nexx Smart Home' (Ojasvit Techno Private Limited), neither of which controls this product. It matters most in the security record: an NVD keyword search for 'Nexx' returns eighteen CVEs, and the ten most recent — the 2025 and 2026 entries — are Nexxt Solutions router vulnerabilities, not this vendor's. Anyone checking whether Nexx has new vulnerabilities will find some, and they will belong to somebody else.

Exactly which product this is[7][17]

Model number
NXG-300
Generation
3rd (follows NXG-100B and NXG-200)
Region this page covers
US
Also sold or listed as
Nexx Garage NXG-300 · Nexx Smart Garage Door Opener

“Not established” means we have not sourced that detail yet — not that the product has no model number, generation or regional variant. We publish the gap rather than filling it.

Compatibility

EcosystemSupportThe catch
Apple HomeDoesn't workVerified: does not work with this ecosystem[21]Not an Apple Home accessory — it never appears in the Home app, and there is no HomeKit hub access, automation or sharing. The vendor's own NXG-300 page lists 'Siri' under Works With and makes no HomeKit claim, and its documentation describes Siri SHORTCUTS setup, which runs an app action by voice. So this is not a false vendor claim. But the retail listing title reads 'Compatible with Alexa, Google Assistant, Siri', which is accurate and easily misread by a buyer as Apple Home support.
Amazon AlexaPartialPartial support — see the catch[20]Works through an Alexa smart-home skill, published under the maker's company name SimpalTEK, over the maker's cloud. The maker's own page carries a real limit: 'Routines are not available due to Amazon Restrictions', so the device cannot take part in Alexa Routines. Two skill generations exist with different phrasing: the older one needs 'Alexa, ask Nexx Garage to open garage door', the newer smart-home skill does not. We could not read the Amazon skill store pages, so the skill's rating, review count and last update are unknown.
Google HomePartialPartial support — see the catch[28]Works through a cloud-to-cloud Google Home Action. Opening by voice requires a spoken PIN and it cannot be disabled; closing requires none. That is Google's safety behaviour for garage doors rather than a vendor limitation. Google's own works-with directory listing could not be retrieved, so the directory status is UNKNOWN and this rests on hands-on reporting plus the vendor's own materials.
SmartThingsPartialPartial support — see the catch[28]A cloud-to-cloud SmartThings connection exists under the brand NexxHome, and the maker states outright that it does not work with a SmartThings hub; there is no local path, only cloud to cloud. One forward-looking catch that also affects the Home Assistant workaround: per Home Assistant's own documentation, Samsung begins phasing out free third-party access to SmartThings in October 2026 in favour of a paid plan, so a route that is free today may not stay free.
Home AssistantDoesn't workVerified: does not work with this ecosystem[28]No official integration and no community add-on exist. Home Assistant community requests date back to 2018 and remain unfulfilled. The maker's own answer is a support article routing Home Assistant users through SmartThings, a two-cloud chain from Home Assistant to Samsung's cloud to Nexx's cloud, and the maker disclaims even that: 'shared by one of our Nexx users and hasn't been fully tested by our team. Please use at your own risk.' The only genuinely local path is destructive: owners of the NXG-200 have replaced its firmware entirely, which voids the warranty and abandons the Nexx app. Recorded as no because a maker-disclaimed two-cloud chain and a firmware replacement are not integrations.

Protocols: WIFI · BLUETOOTH[8][12]

Needs before it works: No hub; the controller joins your 2.4 GHz Wi-Fi directly. Bluetooth is advertised on the product page as 'New Bluetooth connectivity', and the maker's blog claims the predecessor works over Bluetooth so you can control the door when the internet is out. Treat that claim as thinly documented: the quick-start guide filed with the FCC does not mention Bluetooth at all, and the maker publishes nothing about its range, whether it works only with a phone nearby, or whether it reports status as well as opening the door. All of that is unknown. Every ecosystem connection runs through the maker's cloud; no way to control it on your own network is documented.[12]

What it can do[24]

You can tell it to

  • Open/close

It reports

  • Contact state

Listed capabilities are what we could establish from vendor documentation. An ability missing here is unestablished — not necessarily absent.

Subscription reality[20]

✓ Works without a subscription: Yes.

Vendor account required: Not established — we have not sourced this yet.

No subscription was found for any function. Noted for completeness rather than as a selling point — the material facts about this product are in the security and safety sections below, not in its pricing model.

Maintenance reality[16]

Security updates[25]

Nexx publishes no security-update support date for this model. That is a gap in what the manufacturer has published, not evidence either way — some makers declare a support period and some say nothing at all.

Nexx publishes no security-support period, and on this model it publishes noticeably less than that. The product page carries no firmware, update or security statement of any kind. The support index is the more telling surface: it lists five products - Smart Alarm NXAL-100, Smart Garage NXG-200, Smart Garage NXG-100, Smart Plug NXPG-100 and Smart Garage Adapter NXAD-200 - and the NXG-300 this record describes is not among them, so the vendor's own support hub offers it no manuals, troubleshooting or compatibility pages. No regulatory declaration was found on any Nexx surface. Readers should weigh that against what this record already documents about the 2023 federal advisory affecting Nexx controllers: a manufacturer with an open advisory history that publishes no patching commitment leaves a buyer with nothing to hold it to.

The catch

There is an open United States government security advisory covering this product line, and the maker never engaged with it. CISA published the advisory on 4 April 2023, covering five vulnerabilities in Nexx devices. The most severe, rated 9.3 by CISA and 10 out of 10 by the national vulnerability database, was a set of universal built-in credentials that let a remote attacker open any customer's garage door with one request. The researcher first contacted Nexx on 4 January 2023 and received no reply before publishing three months later. Nexx did act afterwards: on 7 April 2023 it emailed customers announcing a security update by April 10 and said it had disabled the devices' internet connection to address the issue. What nobody has ever established is whether that fixed anything. CISA's advisory has never been revised and still reads 'Nexx has not responded to requests to work with CISA to mitigate these vulnerabilities.' All five vulnerabilities remain listed with no patch, no maker advisory and no fixed version. Nexx has published no security bulletin and no firmware changelog, and no researcher, journalist or agency has re-tested in the three years since. Two more facts a buyer should have: the built-in credentials were reported to live in both the firmware and the phone app, and the iPhone app has not been updated since December 2021, so no app update has ever removed them, though the server-side flaws could have been fixed silently. And the two other products named in that advisory, the Smart Plug and the Smart Alarm, are still listed for sale today; the two garage models CISA named are the two now sold out. None of this appears on the maker's site, which markets the product's encryption in superlative terms. Separately, and on a different axis: federal rules require an audible and visual warning before any unattended close, and Nexx publishes an official tutorial for switching its warning beep off, a mandatory safety function shipped as a user preference. No visual warning component is evidenced at all. The safety documentation has also gone backwards over the product line's life: the older NXG-100 manual carries a proper installation-warning page, and the NXG-200 and NXG-300 manuals dropped it, leaving a single generic line.

Who it's for

Anyone considering this needs to weigh one thing that no specification sheet carries: a federal advisory covering this product line remains open, the vendor is recorded in it as not having responded, no fix has ever been publicly confirmed by any independent party, and the vendor is still selling other products named in that same advisory. A buyer who is comfortable proceeding would need to be satisfied without any way to verify whether the unit they receive is remediated, because the vendor has published nothing that would let them check. On the functional side, setting the security question aside entirely: it is a cloud-dependent controller with no Apple Home support, no Home Assistant path, no Matter, an Alexa integration that cannot participate in Routines, and an iOS app frozen since 2021 at a 1.76-star rating. Households on Alexa or Google who want a straightforward cloud controller have several alternatives in this category at similar or lower prices without an open advisory attached. We are recording this product because the advisory is a documented public fact that a buyer will not find on the vendor's own pages, not because we have tested it.

Sources & method

Numbered sources below back the facts marked with the matching number above. This is a research profile: compiled from manufacturer documentation, certification registries, and published testing — we state facts, not verdicts, and we have not physically tested this unit. How we work →

  1. [1] Retrieved in full from cisa.gov (WebFetch returned 403; a direct fetch succeeded), released 2023-04-04, covering NXG-100B and NXG-200 plus the Smart Plug and Smart Alarm. Five CVEs: CVE-2023-1748 (hard-coded credentials), CVE-2023-1749, CVE-2023-1750, CVE-2023-1751, CVE-2023-1752. CVE-2023-1748 is scored 9.3 by CISA and 10.0 at NVD — the two authorities differ and both figures are recorded rather than picking one. — regulator-source research, verified 2026-07-19
  2. [2] Researcher Sam Sabetan's own writeup establishes first contact 2023-01-04 and public release 2023-04-04 with no reply at any point. CISA's advisory independently records that Nexx did not respond to coordination attempts. Both are primary to their respective authors. — researcher and regulator source research, verified 2026-07-19
  3. [3] On 2023-04-07 Nexx emailed customers announcing 'a system update to the following product devices to enhance their security and performance: Nexx Garage (all models), Nexx Gate (all models), and Nexx Plug', rolling out that day and completing by 2023-04-10 'if not earlier', and stating 'We had to disable the device internet connection to address this issue'. VERIFICATION CHECKS, ALL NEGATIVE as of 2026-07-19: CISA's advisory shows only the 2023-04-04 release date with no Update A/B revision markers and its mitigations section still reads 'Nexx has not responded to requests to work with CISA to mitigate these vulnerabilities'; all five CVEs at NVD remain vulnStatus Modified, last modified 2026-06-17; reference tags on all five are only Third Party Advisory and US Government Resource, with no Patch and no Vendor Advisory tag; no CPE range on any of the five carries a versionEndExcluding, so NVD records no version at which the flaw ceases. No Nexx security bulletin or firmware changelog was found, and no independent re-test by any researcher, journalist or agency was found in three years. RECORDED DELIBERATELY as 'no confirmed fix' rather than 'unpatched', because asserting a remediated product was unpatched would be a serious error in the other direction. Note in fairness that CVE-2023-1749 through -1752 are server-side and could have been remediated silently. — regulator and NVD research; explicit fairness check, verified 2026-07-19
  4. [4] Domain getnexx.com active, created 2019-02-21, updated 2026-01-17, expires 2027-02-21, status ok. Storefront live and functional with an active cart. ANDROID app Nexx Home v3.11.1.14 updated 2026-01-26. iOS app Nexx Home v3.8.2.3 last updated 2021-12-03, rating 1.76 from 205 ratings. Legal entity SimpalTEK LLC confirmed via both app stores, FCC grantee code 2AN5L, and three registered trademarks. THIS CORRECTS THE BRIEF'S PREMISE: 'vendor abandonment' is too blunt — a company shipping Android builds in 2026 is not defunct. The accurate characterisation is selective neglect plus non-engagement: an active seller that maintains one platform, left the other frozen since before the vulnerabilities were reported, and never answered a researcher, a federal agency or the press. UNKNOWN: Texas entity standing (Comptroller lookup is a session-gated POST returning 302) and current support responsiveness (JS-rendered review widget) — both recorded as observed live, viability unverified. — registry, app-store and WHOIS research; premise corrected, verified 2026-07-19
  5. [5] All THREE FCC-filed manuals were read directly — NXG-100 (2AN5LNXG-100R), NXG-200 (2AN5LNXG200) and NXG-300 (2AZD7NXG-300). A keyword sweep across all three for 'UL 325', '1211', 'audible', 'alarm', 'unattended', 'remote clos' and 'flash' returned zero substantive hits: no §1211.14(f) marking, no reference to 16 CFR 1211, and no documented audible-and-visual pre-close warning sequence. THE SHARPER FINDING, which is stronger than an absence: Nexx publishes an official tutorial titled 'Nexx Home App: Enable or Disable Garage Opener Beep Warning Sound' (March 2021), and its support material states the app 'allows you to choose if your garage door should play a warning sound when activated or not'. 16 CFR 1211 §1211.14 makes the warning MANDATORY, not a user preference — a warning shipped as a toggle the owner can switch off does not meet a mandatory requirement regardless of its default state. Warning hardware does exist (the manual documents pairing beeps: 2 entering pairing, 3 on success, one 2-second beep on failure), but NO visual warning component is evidenced anywhere — the only lights are Power, WiFi and Activity status LEDs on the unit body, inside the garage, which is not a warning lamp. A DOCUMENTATION REGRESSION worth recording: the OLDEST model has the MOST safety documentation. The NXG-100 manual carries a proper installation-warning page ('Nexx Garage and any door sensors are meant to be used with garage door openers that are equipped with photoelectric safety sensors (manufactured after 1993)' plus 'NEVER operate the remote access feature of your Nexx Garage without ensuring that it is safe to do so'), and the newer NXG-200 and NXG-300 manuals DROPPED that page entirely, leaving one line: 'SAFETY WARNING: Make sure the garage door does not get obstructed by any child, person, or object.' STATED WITHOUT OVERREACH: no teardown or firmware analysis was performed, so the beep's duration, its timing relative to door movement, and its default state are all UNKNOWN, and retail packaging was not photographed. This is a documented gap plus a documented defeatable control, NOT a finding of regulatory non-compliance. — regulatory-filing and vendor-documentation research; limits stated, verified 2026-07-19
  6. [6] Two independent signals. FIRST, the FCC grantee changed: every earlier Nexx model was filed by SimpalTEK LLC itself (grantee code 2AN5L), while the NXG-300 was filed under 2AZD7 — CherryEmme Technologies Co. Ltd of Hong Kong, granted 2021-03-29 — which is the signature of moving from in-house design to a contract manufacturer. SECOND, and unambiguous: the NXG-300's own user manual repeatedly refers to the NXG-200, with step headings reading '6. CHECK STATUS OF NXG-200' and '7. ADD NXG-200 TO NEXX HOME'. It is the NXG-200 document with the title swapped and the body left uncorrected. The same manual contains mangled customer-facing links ('gotnexx.Bm/dwck', 'support@getnexx.Bm') that would not work if typed. PRACTICAL CONSEQUENCE FOR THE SECURITY QUESTION: the NXG-300 is the only garage model still purchasable and the only one NOT named in CISA's advisory — but if it is the NXG-200 design re-sourced to an ODM, its absence from the advisory is a technicality of enumeration rather than evidence it was ever fixed. All grant dates were verified against two independent sources (fccid.io and fcc.report) because fccid.io initially showed application and grant dates as identical. — regulatory-filing and vendor-manual research, verified 2026-07-19
  7. [7] The Texas Comptroller's public Active Franchise Taxpayers dataset (data.texas.gov/resource/9cir-efmm.json, rows updated 2026-07-18) lists SIMPALTEK LLC with status A (Active) and right to transact business A (Active), taxpayer number 32060503383, charter date 2016-05-16, at an address matching the FCC grantee record exactly. Cloud infrastructure is up (api.nexxhome.com and home.nexxhome.com both return HTTP 200) and the store transacts. NO acquisition, bankruptcy, insolvency or discontinuation reporting was found. RECORDED EXPLICITLY BECAUSE 'DEFUNCT' WOULD BE FACTUALLY WRONG and indefensible. What the evidence supports instead is a single-maintainer skeleton operation: the Android app shipped 2026-01-26 while the iOS app has been untouched since 2021-12-03 at 1.8 stars; the YouTube channel linked in Nexx's own site footer is CONFIRMED DEAD ('This channel does not exist'); the Facebook page appears deleted, which is meaningful rather than a login wall because Facebook group content loaded un-authenticated in the same session; there is no phone support, only email; no BBB profile exists across three searches; and the parent's own domain simpaltek.com is a dead Shopify store. Also confirmed: the two garage models named in CISA's advisory (NXG-200, NXG-100B) now report available:false, while the Smart Plug NXPG-100 and Smart Alarm NXAL-100 — also named in that advisory — remain purchasable. — state-registry, app-store and infrastructure research; framing corrected, verified 2026-07-19
    Backs: Product identity
  8. [8] csa-iot.org/csa-iot_products/ was searched for 'nexx' twice, once with Matter and product-type filters and once unfiltered. Both loaded successfully and returned 'No Entries Found — Please try adjusting your selected filters.' A blocked search does not produce that message. Nexx makes no Matter or Thread claim on its own product page either. — registry research, verified 2026-07-19
    Backs: Protocols
  9. [9] From the FCC-filed NXG-300 quick-start guide: the compatibility test instructs the installer to 'put each end to the same terminals where your wall button wires are terminated to. By doing so, your garage door should activate', and installation is to 'twist together each wire of the wall button to each of Nexx's connection' with 'It does not matter which wires goes to which terminals'. So it is a momentary dry-contact relay wired in parallel with the existing wall button, polarity-agnostic. WHAT IS NOT ESTABLISHED: Nexx publishes NO statement anywhere naming Security+ 2.0, Security+ 3.0, learn-button colours or myQ, and its compatibility page is a dropdown lookup with no published static list. A Nexx adapter (NXAD-200) exists and the vendor states some openers 'will only work with Nexx Garage Adapter', which fits the pattern of digital-serial wall controls defeating a plain contact closure — but that reasoning is mechanism-level inference plus third-party adapter evidence, NOT a Nexx claim, and is flagged as such. — regulatory-filing research; inference flagged as inference, verified 2026-07-19
  10. [10] Three queries against saferproducts.gov/RestWebServices/Recall — RecallTitle=Nexx, ProductName=Nexx and RecallDescription=Nexx — each returned an empty array, while a control query for ProductName=garage returned 8 records (Chamberlain myQ 2023, Loctek, Eagle, H.E., Genie, Lennox, Chamberlain 1997, Stanley 1991), none of them Nexx. So the negative is real. METHODOLOGY CAVEAT THAT SHOULD TRAVEL TO FUTURE RECORDS: this API's ManufacturerName parameter DOES NOT FILTER — it returned an identical 9,905-record dump for 'Nexx', for 'SimpalTEK', and for the nonsense control string 'ZZZZQQQQNOTREAL'. Any result obtained through that parameter is meaningless and must not be cited. Note also that the absence of a recall is NOT evidence of safety: a recall requires CPSC action, and consumer incident reports could not be checked because the CPSC public incident database exposes no REST endpoint. — regulator-API research with control and negative control, verified 2026-07-19
  11. [11] smarthomeexplorer.com/guides/best-smart-garage-door-openers-2026 claims a CNET rating of 8.2/10 for the NXG-300 and quotes CNET as saying it 'responds to voice commands faster than any other single-controller garage opener in this price range'. NO CNET review of this product could be found at all; the quote and the score appear invented. The same page presents a '7.8/10 Consensus' aggregated from '21 trusted sources including Wirecutter, CNET, PCMag, Consumer Reports', none of which could be verified as having reviewed it, and recommends the product in a 2026 buying guide with NO mention of the CISA advisory or the five CVEs — the single most decision-relevant fact about it. Also rejected: manuals.plus serves an NXG-300 'manual' page contaminated with a different product's content, listing All-O-Matic support contacts and describing RADIO/COMMON terminal wiring — the FCC filing was used instead. BOT-WALLED and unreachable: cisa.gov via WebFetch (403, resolved by direct fetch), Amazon Alexa skill store pages (500 on all attempts), and Google's works-with directory listing. — source-quality audit, verified 2026-07-19
  12. [12] getnexx.com/products/nexx-smart-wi-fi-garage-door-controller-nxg-300, read 2026-08-09: the page advertises 'New Bluetooth Connectivity' and 'Greater control and convenience with NEW Bluetooth activation', and its connectivity specification names only '802.11 b/g/n Wi-Fi connection @ 2.4GHz' — no Bluetooth role, range or capability is stated. getnexx.com/pages/faq, read the same day, contains no Bluetooth answer. Nexx's internet-outage Bluetooth claim was located but is published for the NXG-200 and is not cited here. — vendor-page research (absence-of-claim), verified 2026-08-09
    Backs: Protocols, Required hub or bridge
  13. [13] The NXG-300 is listed at $79.99 with an active cart on getnexx.com, checked 2026-07-19. The predecessors NXG-100B and NXG-200 are sold out. The original release year of the NXG-300 could not be primary-sourced and is recorded as unknown. NOTE ONE FACT CARRIED FROM THE SECURITY RE — migrated hand stamp, verified 2026-07-19
    Backs: Market availability
  14. [14] The company is operating: the domain was updated 2026-01-17, the storefront is live and taking orders, and the Android app shipped version 3.11.1.14 on 2026-01-26. But platform maintenance is markedly uneven and one half of the product has not been touched in years. — migrated hand stamp, verified 2026-07-19
    Backs: Service status
  15. [15] getnexx.com/products/nexx-smart-wi-fi-garage-door-controller-nxg-300.js read 2026-08-13: price 7999 cents, compare_at_price null, available true, single variant. The whole catalogue was read the same day via getnexx.com/products.json?limit=100, which also settles the two facts this record's catch depends on: the two garage models CISA named are still available:false (NXG-200 $79.99, NXG-100B $59.99 and the recertified NXG-100B $49.99), while the Smart Plug NXPG-100W ($16.99/$29.99/$49.99) and NEXX SMART ALARM ($149.99) named in the SAME advisory are still available:true. — vendor-data research (structured storefront endpoint, per the standing method rule), verified 2026-08-13
    Backs: Price, Market availability
  16. [16] itunes.apple.com/search?term=Nexx+Home&entity=software&country=us read 2026-08-13 returns Nexx Home by SimpalTek, LLC: version 3.8.2.3, currentVersionReleaseDate 2021-12-03T12:50:17Z, releaseDate 2018-10-11, averageUserRating 1.76, userRatingCount 205, minimumOsVersion 12.2. Every one of those figures is identical to the 2026-07-19 record, which is the finding: nothing has moved in four years and eight months, across a federal advisory and two subsequent product generations. ⊕ Read via Apple's structured search API rather than the App Store web page, so the version and date are fields rather than rendered text. — counterparty-source research (platform API), verified 2026-08-13
    Backs: Service status, Maintenance
    Checked 2026-08-13. This page no longer lets us re-check it automatically, so that date is where this fact stands.
  17. [17] services.nvd.nist.gov keywordSearch=Nexx read 2026-08-13 returns 18 CVEs. CVE-2026-31848 was opened to check: its description and CPE name 'Nexxt Solutions' and the product 'Nebula 300+', a router — not this vendor. The same holds for the CVE-2025-52376..79 and CVE-2026-31846..51 clusters. Apple's App Store search on the same day returns 'Nexxt Home' (Software Brokers of America) and 'Nexx Smart Home' (Ojasvit Techno Private Limited) beside the real Nexx Home app. ⚠ RECORDED BECAUSE A KEYWORD SEARCH IS HOW A CAREFUL BUYER WOULD CHECK THIS PRODUCT, and here it returns a majority of results about somebody else — which cuts BOTH ways: it manufactures alarm about Nexx, and it would equally hide a real Nexx finding in a list of Nexxt ones. — registry research (NVD API) with per-CVE attribution check, verified 2026-08-13
    Backs: Product identity
  18. [18] services.nvd.nist.gov read 2026-08-13. CVE-2023-1748 carries vulnStatus 'Modified', NVD primary CVSS 10.0 and ICS-CERT secondary 9.3, lastModified 2026-06-17. Its reference set is TWO entries, both the same CISA advisory URL, tagged verbatim ["Third Party Advisory","US Government Resource"]. CVE-2023-1750 was read the same way as a second sample and its tags are byte-identical. ⚠ METHOD: a summary table over the whole keyword search reported a 'Vendor Advisory' tag on these CVEs; reading the per-CVE reference objects showed the tags are Third Party Advisory / US Government Resource and nothing else. The summary was wrong, and it was wrong in the direction that would have let us quietly retire this record's central claim. Tag arrays get read verbatim or not at all. — registry research (NVD API, verbatim reference tags), verified 2026-08-13
  19. [19] cisa.gov refused both authorized routes on 2026-08-13: the advisory page www.cisa.gov/news-events/ics-advisories/icsa-23-094-01 returned HTTP 403, and so did the machine-readable CSAF document at www.cisa.gov/sites/default/files/csaf/2023/icsa-23-094-01.json. A 403 is a policy statement, so no rendering rung was attempted (fetch-conduct rule: the rung covers JS shells and rate limits, never a refusal). ⚠ WHAT THIS MEANS FOR THE RECORD, stated plainly: this record's sentence that the advisory 'has never been revised and still reads Nexx has not responded' rests on the 2026-07-19 read and was NOT re-verified today. What today's evidence does support is narrower and worth keeping separate — NVD's copy of all five CVEs still carries no patch and no vendor-advisory reference, which is corroboration of the same picture from a different registry, not a re-read of the sentence. — plain-fetch, refused (403) — twice, two paths, no evasion attempted, verified 2026-08-13
  20. [20] getnexx.com product page read 2026-08-13. Subscription: no plan, fee, tier or recurring-cost language appears anywhere on the page — the $79.99 is a one-time purchase, which closes the subscription axis on an affirmative read rather than on an absence assumed from elsewhere. Alexa: the page still carries 'Routines are not available due to Amazon Restrictions.' verbatim, so that integration catch is current rather than inherited. Apple: the Works With list reads 'iOS, Android, Bluetooth, Amazon Alexa, Google Home, Siri, SmartThings, IFTTT' — Siri is named, HomeKit and Apple Home appear nowhere on the page, which is exactly the shape the apple cell records (none, via Siri Shortcuts, with a retail title a buyer can misread). Bluetooth is still marketed as 'New Bluetooth Connectivity' with no specification behind it. — vendor-documentation research, verified 2026-08-13
    Backs: Subscription, Amazon Alexa compatibility
  21. [21] getnexx.com product page for the NXG-300, read 2026-08-13. The Works With list reads verbatim: 'iOS, Android, Bluetooth, Amazon Alexa, Google Home, Siri, SmartThings, IFTTT'. Neither 'HomeKit' nor 'Apple Home' appears anywhere on the page. Nexx's own documentation describes Siri SHORTCUTS setup, which runs an app action by voice rather than exposing an accessory to the Home app. — vendor-documentation research, verified 2026-08-13
    Backs: Apple Home compatibility
  22. [22] Re-verification performed 2026-08-13 (BQ-107 batch 33): price, stock and the advisory-adjacent SKU states from the storefront's structured endpoints · the frozen iOS app from Apple's search API · all five advisory CVEs re-read at NVD with verbatim reference tags · the vendor product page re-read for subscription, Alexa Routines and the Works-With list. No integration level changed. Two things this pass ESTABLISHED that the axis should carry forward: cisa.gov refuses us on both authorized routes, so the advisory-text sentence rests on the July read and now says so; and an NVD keyword search for this brand is majority false positives belonging to Nexxt Solutions, now recorded in similarNamesDiffer. The stored price was corrected from a rounded 80 to 79.99. — record re-verification (BQ-107 batch 33), verified 2026-08-13
    Backs: Research status
  23. [23] getnexx.com product page (connectivity specification) and the calibrated CSA-IoT search, both already cited on this record — evidence read against sources this record already cites (BQ-191 provider-side backfill, D-7 bars), verified 2026-08-19
    Backs: What it provides to your home
  24. [24] getnexx.com product page for the NXG-300, read 2026-08-20: owners can "open, close, and monitor their garage door from anywhere in the world", with notifications when the door status changes and reminders if it is left open. Automation surfaces include "Just Drive" geofenced opening and schedules to "automatically arm and disarm at a certain date and time". Ecosystems named: iOS, Android, Bluetooth, Amazon Alexa, Google Home, Siri, SmartThings and IFTTT, with Alexa/Google/Siri each able to "Open, close, or monitor" — and the qualifier "Routines are not available due to Amazon Restrictions". — vendor-and-ecosystem-doc research (BQ-187 capabilities population, batch 8 — sensors + garage-access), verified 2026-08-20
    Backs: Capabilities
  25. [25] Nexx first-party surfaces read 2026-08-22. Product page getnexx.com/products/nexx-smart-wi-fi-garage-door-controller-nxg-300 contains no occurrence of firmware, security, update or support in any support-period sense. Support index getnexx.com/pages/support enumerates its supported products by model - "Nexx Smart Alarm NXAL-100", "Nexx Smart Garage NXG-200", "Nexx Smart Garage NXG-100", "Nexx Smart Plug NXPG-100", "Nexx Smart Garage Adapter NXAD-200" - and does not list the NXG-300. getnexx.com/pages/security returns 404. No UK PSTI statement or equivalent declaration for Nexx or Simpaltek was located. — first-party security-support sweep (BQ-192, method note 69 rungs a-c walked, outcome recorded whichever way it fell), verified 2026-08-22
    Backs: Security-update support period
  26. [26] No source was read for this entry, deliberately. It records a classification so the classification is not silent: what was classified is evidence this record already carried — the integration catches and the citations already listed on this page — and this pass altered none of it. — absence-classification reading pass (doc 16 #453) — this record's own integration catches and the provenance entries claiming them, re-read against the 2026-08-22 classification; no vendor page fetched and no new research done, verified 2026-08-22
  27. [27] Record-keeping entry: the migrated research stamp was retired from this record on 2026-08-30 — internal, verified 2026-08-30
  28. [28] Nexx, NXG-300 Smart Wi-Fi Garage Door Controller product page (https://getnexx.com/products/nexx-smart-wi-fi-garage-door-controller-nxg-300), read 2026-09-03 through tools/lib/gated-fetch.mjs (HTTP 200). The page publishes a "Works With" list, verbatim and in order: "iOS · Android · Bluetooth · Amazon Alexa · Google Home · Siri · SmartThings · IFTTT" — which names Google Home and SmartThings, and does NOT name Home Assistant. The feature copy states the voice scope, verbatim: "VOICE CONTROL Open, close, or monitor using Amazon Alexa, Google Assistant, or Apple Siri. * Routines are not available due to Amazon Restrictions." — vendor-page research (BQ-322 batch 5 — claim-coverage cells, first-party re-read through tools/lib/gated-fetch.mjs), verified 2026-09-03
    Backs: Google Home compatibility, SmartThings compatibility, Home Assistant compatibility
  29. [29] the record's own customer-facing prose fields as they stood before 2026-09-05 (no new external read) — consumer-translation pass (07 §2A.12) — customer-facing prose rewritten to the three-layer rule; NO FIELD VALUE, LEVEL, PATH OR TRANSPORT CHANGED. The research trail that used to sit inside those fields is preserved here verbatim., verified 2026-09-05

Compatibility and lifecycle information reflects the last-verified date above and can change without notice (firmware updates, cloud-service changes, discontinuations). It is provided as-is, for information — verify with the manufacturer before purchasing. Spot an error? Tell us and we'll fix it. Full terms: Terms of Service.

Check it against YOUR setup →