CVE-2026-18900: OS Command Injection in H3C NX15
CVE-2026-18900 is a high-severity OS command injection vulnerability in the H3C NX15 product, specifically affecting the file.exec function of the /api/esps endpoint in the Backend RPC component. This vulnerability allows remote attackers to manipulate the File argument to execute arbitrary OS commands. Exploit code has been publicly released, increasing the risk of attacks. No official patch or remediation guidance has been confirmed by the vendor at this time.
AI Analysis
Technical Summary
A security weakness exists in H3C NX15 V100R017 within the Backend RPC component's file.exec function accessed via the /api/esps endpoint. The vulnerability arises from improper handling of the File argument, enabling OS command injection. This flaw can be exploited remotely without user interaction and requires high privileges. Public exploit code is available, but no vendor-provided fix or mitigation details have been published yet.
Potential Impact
Successful exploitation allows remote attackers with high privileges to execute arbitrary operating system commands on the affected device. This can lead to full system compromise, unauthorized control, and potential disruption of network infrastructure relying on the H3C NX15 device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable API endpoint and monitor for suspicious activity related to the file.exec function. Follow vendor communications closely for updates.
CVE-2026-18900: OS Command Injection in H3C NX15
Description
CVE-2026-18900 is a high-severity OS command injection vulnerability in the H3C NX15 product, specifically affecting the file.exec function of the /api/esps endpoint in the Backend RPC component. This vulnerability allows remote attackers to manipulate the File argument to execute arbitrary OS commands. Exploit code has been publicly released, increasing the risk of attacks. No official patch or remediation guidance has been confirmed by the vendor at this time.
CVSS v4.0
Score 8.6high
Affected software
H3C
NX15
cpe:2.3:a:h3c:nx15:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
A security weakness exists in H3C NX15 V100R017 within the Backend RPC component's file.exec function accessed via the /api/esps endpoint. The vulnerability arises from improper handling of the File argument, enabling OS command injection. This flaw can be exploited remotely without user interaction and requires high privileges. Public exploit code is available, but no vendor-provided fix or mitigation details have been published yet.
Potential Impact
Successful exploitation allows remote attackers with high privileges to execute arbitrary operating system commands on the affected device. This can lead to full system compromise, unauthorized control, and potential disruption of network infrastructure relying on the H3C NX15 device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable API endpoint and monitor for suspicious activity related to the file.exec function. Follow vendor communications closely for updates.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-08-04T20:05:12.430Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a72bb88bf8831d53939ad76
Added to database: 08/05/2026, 04:26:48 UTC
Last enriched: 08/12/2026, 15:47:15 UTC
Last updated: 09/19/2026, 10:01:30 UTC
Views: 81
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.