A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
CVE-2026-65197 is a vulnerability in H3C HDM Family-A G5 firmware verification. The device verifies RSA signatures of firmware images against a public key stored in a mutable file `/conf/public.pem`. This file can be overwritten by an authenticated Redfish client with firmware-update privileges, allowing replacement of the trust anchor with an attacker-controlled key. Without a hardware root-of-trust, malicious firmware signed with the substituted key can pass verification. This affects versions up to and including 6.14.01.
CVE-2026-18902 is a command injection vulnerability in the H3C NX15 device, specifically in the esps.wan.repeater.set/repeaterproc function of the /api/esps file. The vulnerability arises from improper handling of the my2P4key argument, allowing remote attackers to execute arbitrary commands. The exploit code is publicly available, increasing the risk of exploitation. No official patch or remediation guidance has been confirmed by the vendor at this time.
CVE-2026-18901 is a high-severity security vulnerability in H3C NX15 V100R017 affecting the Web API component. Specifically, the function service.add in the /api/esps file exposes a dangerous routine that can be manipulated remotely. The vulnerability has a CVSS 4.0 base score of 8.6, indicating a high impact. Exploit details have been publicly disclosed, but no confirmed exploits are known to be active in the wild. The vendor was notified early, but no official patch or remediation guidance is currently available.
CVE-2026-18900 is a high-severity OS command injection vulnerability in the H3C NX15 product, specifically affecting the file.exec function of the /api/esps endpoint in the Backend RPC component. This vulnerability allows remote attackers to manipulate the File argument to execute arbitrary OS commands. Exploit code has been publicly released, increasing the risk of attacks. No official patch or remediation guidance has been confirmed by the vendor at this time.
CVE-2026-18814 is a command injection vulnerability in the H3C NX15 device, specifically impacting the reload.reload_config function in the /api/esps file. This vulnerability allows remote attackers with high privileges to execute arbitrary commands. The exploit code has been publicly disclosed. No official patch or remediation guidance has been provided by the vendor yet.
CVE-2026-18813 is a command injection vulnerability in the H3C NX15 product, specifically affecting the delete function of the /api/esps file. The vulnerability arises from improper handling of the esps.apcm.version argument, allowing remote attackers to inject commands. The vulnerability has a high severity score of 8.6 and public exploit details have been disclosed. No official patch or remediation guidance is currently available from the vendor.
CVE-2026-18812 is a high-severity command injection vulnerability in the H3C NX15 device, specifically in the esps.ipv6.wan function of the /api/esps file. The vulnerability arises from improper handling of the workMode argument, allowing remote attackers to execute arbitrary commands. Exploit code has been published, but no official patch or remediation guidance has been provided by the vendor yet.
CVE-2026-18811 is a high-severity command injection vulnerability in the H3C NX15 device, specifically in the Add function of the /api/esps file. An attacker can remotely manipulate the esps.filter.url argument to execute arbitrary commands. Exploit code is publicly available, but no official patch or remediation guidance has been provided by the vendor yet.
CVE-2026-18810 is a medium severity vulnerability in H3C NX15 V100R017 involving missing authentication in the /api/wizard/networkSetup function. This flaw allows remote attackers to perform actions without proper authentication. No patch or official remediation information is currently available from the vendor.
A flaw has been found in H3C SecPath F1000-C8300 up to 20260522. This impacts an unknown function of the file /webui/?g=log_fw_nbc_mail_jsondata. Executing a manipulation of the argument subject can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability. A technical fix is planned to be released.
A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function change_passwd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
CVE-2026-10259 is a high-severity stack-based buffer overflow vulnerability in the H3C Magic B0 device, specifically in the SetMobileAPInfoById function within the /goform/aspForm file. The vulnerability can be triggered remotely by manipulating an argument parameter, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The vulnerability affects version 100R002 and earlier. Although the exploit has been publicly disclosed, there is no indication that it has been observed in the wild. The vendor has not responded to the disclosure, and no patch or official remediation is currently available.
A vulnerability was found in H3C Magic B0 up to 100R002. This affects the function Edit_BasicSSID_5G of the file /goform/aspForm. Performing a manipulation of the argument param results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-8764 is a high-severity buffer overflow vulnerability in H3C Magic B3 devices up to version 100R002. It affects the UpdateWanParams function in the /goform/aspForm file, where manipulation of the 'param' argument can trigger the overflow. The vulnerability is remotely exploitable without user interaction and requires high privileges. Although the exploit has been publicly disclosed, there are no known exploits in the wild yet. The vendor has not responded to the disclosure and no patch or official remediation is currently available.
A vulnerability was detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function SetMobileAPInfoById of the file /goform/aspForm. Performing a manipulation of the argument param results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability has been found in H3C Magic B1 up to 100R004. The affected element is the function SetAPWifiorLedInfoById of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.