CVE-2026-112370
A vulnerability was found in H3C Magic NX15 100R017
- Risk score
- 75/100
- CVSS
- 9.9 v3.1
- Exploit chance (30 days)
- 1.7%
- Published
- 19 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A critical vulnerability (CVSS 9.9) in H3C Magic NX15 100R017 allows remote os command injection via manipulation of the /usr/bin/usrlist file's sub_416874 function.
- Affected
- {'products': ['H3C Magic NX15 100R017'], 'packages': [], 'versions': ['100R017']}
- Fix
- Check the linked advisory for a fix, as none is provided.
- Exploitation
- Public proof of concept
Why it is Amber
- CVSS 9.9 critical
References
- https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_cmdi_root_rce
- https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_cmdi_root_rce/poc
- https://vuldb.com/cve/CVE-2026-112370
- https://vuldb.com/submit/983537
- https://vuldb.com/vuln/422416
- https://vuldb.com/vuln/422416/cti
Original description
A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
Last activity 19 Oct 2026. Patch Forecast updates every hour.