CVE-2026-15479

The vulnerability CVE-2026-15479 affects H3C NX15 V100R017. The vulnerable component is the Administrator Password Modification Endpoint, specifically the change_passwd function at /api/login/modify. Manipulating the newPass parameter results in weak password recovery. The issue can be exploited ...

EUVD-2026-43201

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function changepasswd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be...

Information Disclosure Vulnerability in H3C NX15 of Xinhua San Technologies Co.

The H3C NX15 is a home wireless router. An information disclosure vulnerability exists in the H3C NX15 of Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...