# cve.now: H3c

The newest entries naming H3c as an affected vendor (up to 200), of 60 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-112373](https://cve.now/CVE-2026-112373.md): H3C Magic NX15 usrlist sub\_416874 stack-based overflow (CVSS 7.1)
- [CVE-2026-112372](https://cve.now/CVE-2026-112372.md): H3C Magic NX15 upload importprofile path traversal (CVSS 5.1)
- [CVE-2026-112371](https://cve.now/CVE-2026-112371.md): H3C Magic NX15 RPC esps write code injection (CVSS 9.4)
- [CVE-2026-112370](https://cve.now/CVE-2026-112370.md): H3C Magic NX15 usrlist sub\_416874 os command injection (CVSS 9.4)
- [CVE-2026-65197](https://cve.now/CVE-2026-65197.md): H3C G3/G5 HDM Firmware Verification Key Replacement (CVSS 3.1)
- [CVE-2023-54405](https://cve.now/CVE-2023-54405.md): H3C CVM Unauthenticated File Upload via fileUpload/upload Token (CVSS 9.3)
- [CVE-2026-18902](https://cve.now/CVE-2026-18902.md): H3C NX15 esps repeaterproc command injection (CVSS 8.6)
- [CVE-2026-18901](https://cve.now/CVE-2026-18901.md): H3C NX15 Web API esps service.add routine (CVSS 8.6)
- [CVE-2026-18900](https://cve.now/CVE-2026-18900.md): H3C NX15 Backend RPC esps file.exec os command injection (CVSS 8.6)
- [CVE-2026-18814](https://cve.now/CVE-2026-18814.md): H3C NX15 esps reload.reload\_config command injection (CVSS 8.6)
- [CVE-2026-18813](https://cve.now/CVE-2026-18813.md): H3C NX15 esps delete command injection (CVSS 8.6)
- [CVE-2026-18812](https://cve.now/CVE-2026-18812.md): H3C NX15 esps esps.ipv6.wan command injection (CVSS 8.6)
- [CVE-2026-18811](https://cve.now/CVE-2026-18811.md): H3C NX15 esps add command injection (CVSS 8.6)
- [CVE-2026-18810](https://cve.now/CVE-2026-18810.md): H3C NX15 networkSetup missing authentication (CVSS 6.9)
- [CVE-2026-15907](https://cve.now/CVE-2026-15907.md): H3C SecPath F1000-C8300 g=log\_fw\_nbc\_mail\_jsondata sql injection (CVSS 6.9)
- [CVE-2026-15479](https://cve.now/CVE-2026-15479.md): H3C NX15 Administrator Password Modification Endpoint modify change\_passwd password recovery (CVSS 6.9)
- [CVE-2026-10259](https://cve.now/CVE-2026-10259.md): H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflow (CVSS 8.7)
- [CVE-2026-9393](https://cve.now/CVE-2026-9393.md): H3C Magic B0 aspForm Edit\_BasicSSID\_5G buffer overflow (CVSS 8.7)
- [CVE-2026-8764](https://cve.now/CVE-2026-8764.md): H3C Magic B3 aspForm UpdateWanParams buffer overflow (CVSS 8.6)
- [CVE-2026-6581](https://cve.now/CVE-2026-6581.md): H3C Magic B1 aspForm SetMobileAPInfoById buffer overflow (CVSS 8.7)
- [CVE-2026-6563](https://cve.now/CVE-2026-6563.md): H3C Magic B1 aspForm SetAPWifiorLedInfoById buffer overflow (CVSS 8.7)
- [CVE-2026-6560](https://cve.now/CVE-2026-6560.md): H3C Magic B0 aspForm Edit\_BasicSSID buffer overflow (CVSS 8.7)
- [CVE-2026-3943](https://cve.now/CVE-2026-3943.md): H3C ACG1000-AK230 aaa\_portal\_auth\_local\_submit command injection (CVSS 6.9)
- [CVE-2026-3701](https://cve.now/CVE-2026-3701.md): H3C Magic B1 aspForm Edit\_BasicSSID\_5G buffer overflow (CVSS 8.7)
- [CVE-2025-14196](https://cve.now/CVE-2025-14196.md): H3C Magic B1 aspForm sub\_44de0 buffer overflow (CVSS 8.7)
- [CVE-2025-14015](https://cve.now/CVE-2025-14015.md): H3C Magic B0 aspForm EditWlanMacList buffer overflow (CVSS 8.7)
- [CVE-2025-10942](https://cve.now/CVE-2025-10942.md): H3C Magic B3 aspForm EditMacList buffer overflow (CVSS 8.7)
- [CVE-2025-8907](https://cve.now/CVE-2025-8907.md): H3C M2 NAS Webserver Configuration unnecessary privileges (CVSS 7.3)
- [CVE-2025-6091](https://cve.now/CVE-2025-6091.md): H3C GR-3000AX aspForm UpdateIpv6Params buffer overflow (CVSS 8.7)
- [CVE-2025-6090](https://cve.now/CVE-2025-6090.md): H3C GR-5400AX aspForm UpdateIpv6params buffer overflow (CVSS 8.7)
- [CVE-2025-5162](https://cve.now/CVE-2025-5162.md): H3C SecCenter SMP-E1114P02 importFile unrestricted upload (CVSS 5.3)
- [CVE-2025-5161](https://cve.now/CVE-2025-5161.md): H3C SecCenter SMP-E1114P02 download operationDailyOut path traversal (CVSS 5.3)
- [CVE-2025-5160](https://cve.now/CVE-2025-5160.md): H3C SecCenter SMP-E1114P02 download path traversal (CVSS 5.3)
- [CVE-2025-5159](https://cve.now/CVE-2025-5159.md): H3C SecCenter SMP-E1114P02 download path traversal (CVSS 5.3)
- [CVE-2025-5158](https://cve.now/CVE-2025-5158.md): H3C SecCenter SMP-E1114P02 downloadSoftware path traversal (CVSS 5.3)
- [CVE-2025-5157](https://cve.now/CVE-2025-5157.md): H3C SecCenter SMP-E1114P02 fileContent path traversal (CVSS 5.3)
- [CVE-2025-5156](https://cve.now/CVE-2025-5156.md): H3C GR-5400AX aspForm EditWlanMacList buffer overflow (CVSS 8.7)
- [CVE-2025-4998](https://cve.now/CVE-2025-4998.md): H3C Magic R200G HTTP POST Request aspForm EditWlanMacList denial of service (CVSS 7.1)
- [CVE-2025-4997](https://cve.now/CVE-2025-4997.md): H3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of service (CVSS 7.1)
- [CVE-2025-4446](https://cve.now/CVE-2025-4446.md): H3C GR-5400AX aspForm Edit\_List\_SSID buffer overflow (CVSS 8.6)
- [CVE-2025-4440](https://cve.now/CVE-2025-4440.md): H3C GR-1800AX aspForm EnableIpv6 buffer overflow (CVSS 8.6)
- [CVE-2025-3854](https://cve.now/CVE-2025-3854.md): H3C GR-3000AX HTTP POST Request aspForm Edit\_List\_SSID buffer overflow (CVSS 8.6)
- [CVE-2025-3546](https://cve.now/CVE-2025-3546.md): H3C Magic BE18000 HTTP POST Request getLanguage FCGI\_CheckStringIfContainsSemicolon command injection (CVSS 8.6)
- [CVE-2025-3545](https://cve.now/CVE-2025-3545.md): H3C Magic BE18000 HTTP POST Request setLanguage FCGI\_CheckStringIfContainsSemicolon command injection (CVSS 8.6)
- [CVE-2025-3544](https://cve.now/CVE-2025-3544.md): H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI\_CheckStringIfContainsSemicolon command injection (CVSS 8.6)
- [CVE-2025-3543](https://cve.now/CVE-2025-3543.md): H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI\_WizardProtoProcess command injection (CVSS 8.6)
- [CVE-2025-3542](https://cve.now/CVE-2025-3542.md): H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI\_WizardProtoProcess command injection (CVSS 8.6)
- [CVE-2025-3541](https://cve.now/CVE-2025-3541.md): H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI\_WizardProtoProcess command injection (CVSS 8.6)
- [CVE-2025-3540](https://cve.now/CVE-2025-3540.md): H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI\_WizardProtoProcess command injection (CVSS 8.6)
- [CVE-2025-3539](https://cve.now/CVE-2025-3539.md): H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI\_CheckStringIfContainsSemicolon command injection (CVSS 8.6)
- [CVE-2025-2732](https://cve.now/CVE-2025-2732.md): H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection (CVSS 8.6)
- [CVE-2025-2731](https://cve.now/CVE-2025-2731.md): H3C Magic BE18000 HTTP POST Request getDualbandSync command injection (CVSS 8.6)
- [CVE-2025-2730](https://cve.now/CVE-2025-2730.md): H3C Magic BE18000 HTTP POST Request getssidname command injection (CVSS 8.6)
- [CVE-2025-2729](https://cve.now/CVE-2025-2729.md): H3C Magic BE18000 HTTP POST Request networkSetup command injection (CVSS 8.6)
- [CVE-2025-2728](https://cve.now/CVE-2025-2728.md): H3C Magic NX30 Pro/Magic NX400 getNetworkConf command injection (CVSS 8.6)
- [CVE-2025-2727](https://cve.now/CVE-2025-2727.md): H3C Magic NX30 Pro HTTP POST Request getNetworkStatus command injection (CVSS 8.6)
- [CVE-2025-2726](https://cve.now/CVE-2025-2726.md): H3C Magic BE18000 HTTP POST Request esps command injection (CVSS 8.6)
- [CVE-2025-2725](https://cve.now/CVE-2025-2725.md): H3C Magic BE18000 HTTP POST Request auth command injection (CVSS 8.6)
- [CVE-2023-5142](https://cve.now/CVE-2023-5142.md): H3C ER6300G2 Config File userLogin.asp path traversal (CVSS 3.7)
- [CVE-2023-2676](https://cve.now/CVE-2023-2676.md): H3C R160 aspForm stack-based overflow (CVSS 5.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/h3c
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.