CVE-2026-18810

The connected CVE record specifies: affected product is H3C NX15 V100R017; vulnerability exists in the /api/wizard/networkSetup function, where input manipulation leads to missing authentication, enabling remote attack. Reported CVSS scores in the documents indicate high impact (CVSS v3.1 base 7....

PT-2026-67828

Name of the Vulnerable Software and Affected Versions H3C NX15 version V100R017 Description A remote issue exists in the /api/wizard/networkSetup endpoint. Manipulation of an unknown function within this file allows an attacker to bypass authentication. Recommendations At the moment, there is no...

CVE-2025-2729: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects some unknown processing of the file /api/wizard/networkSetup of the component HTTP POST Request Handler. The manipulation leads to...