H3c vulnerabilities
60 CVEs and advisories name H3c as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-112373H3C Magic NX15 usrlist sub_416874 stack-based overflow
- CVE-2026-112372H3C Magic NX15 upload importprofile path traversal
- CVE-2026-112371H3C Magic NX15 RPC esps write code injection
- CVE-2026-112370H3C Magic NX15 usrlist sub_416874 os command injection
- CVE-2026-65197H3C G3/G5 HDM Firmware Verification Key Replacement
- CVE-2023-54405H3C CVM Unauthenticated File Upload via fileUpload/upload Token
- CVE-2026-18902H3C NX15 esps repeaterproc command injection
- CVE-2026-18901H3C NX15 Web API esps service.add routine
- CVE-2026-18900H3C NX15 Backend RPC esps file.exec os command injection
- CVE-2026-18814H3C NX15 esps reload.reload_config command injection
- CVE-2026-18813H3C NX15 esps delete command injection
- CVE-2026-18812H3C NX15 esps esps.ipv6.wan command injection
- CVE-2026-18811H3C NX15 esps add command injection
- CVE-2026-18810H3C NX15 networkSetup missing authentication
- CVE-2026-15907H3C SecPath F1000-C8300 g=log_fw_nbc_mail_jsondata sql injection
- CVE-2026-15479H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery
- CVE-2026-10259H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflow
- CVE-2026-9393H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflow
- CVE-2026-8764H3C Magic B3 aspForm UpdateWanParams buffer overflow
- CVE-2026-6581H3C Magic B1 aspForm SetMobileAPInfoById buffer overflow
- CVE-2026-6563H3C Magic B1 aspForm SetAPWifiorLedInfoById buffer overflow
- CVE-2026-6560H3C Magic B0 aspForm Edit_BasicSSID buffer overflow
- CVE-2026-3943H3C ACG1000-AK230 aaa_portal_auth_local_submit command injection
- CVE-2026-3701H3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflow
- CVE-2025-14196H3C Magic B1 aspForm sub_44de0 buffer overflow
- CVE-2025-14015H3C Magic B0 aspForm EditWlanMacList buffer overflow
- CVE-2025-10942H3C Magic B3 aspForm EditMacList buffer overflow
- CVE-2025-8907H3C M2 NAS Webserver Configuration unnecessary privileges
- CVE-2025-6091H3C GR-3000AX aspForm UpdateIpv6Params buffer overflow
- CVE-2025-6090H3C GR-5400AX aspForm UpdateIpv6params buffer overflow