CVE-2026-112371
A vulnerability was determined in H3C Magic NX15 NX15V100R017
- Risk score
- 68/100
- CVSS
- 9.9 v3.1
- Exploit chance (30 days)
- 0.5%
- Published
- 19 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A vulnerability in the RPC Interface of H3C Magic NX15 NX15V100R017 allows code injection via path manipulation, which can be executed remotely. An attacker could use this to gain control of the system.
- Affected
- {'products': ['H3C Magic NX15'], 'packages': [], 'versions': ['NX15V100R017']}
- Fix
- Check the linked advisory for a fix, as none is provided in this record.
- Exploitation
- Public proof of concept
Why it is Amber
- CVSS 9.9 critical
References
Original description
A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Last activity 19 Oct 2026. Patch Forecast updates every hour.