CVE-2026-112373Medium· 6.5▾ SunlitA security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack rem…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
magic_nx15 NX15V100R017Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112372Medium· 6.6H3C Magic NX15 upload importprofile path traversal
CVE-2026-112370Critical· 9.9H3C Magic NX15 usrlist sub_416874 os command injection
CVE-2026-112371Critical· 9.9H3C Magic NX15 RPC esps write code injection
CVE-2026-65197Low· 3.1H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/conf/public.pem`
CVE-2025-11328High· 8.8A vulnerability was detected in Tenda AC18 15.03.05.19(6318)
CVE-2025-11327High· 8.8A security vulnerability has been detected in Tenda AC18 15.03.05.19(6318)