magic_nx15 vulnerabilities
CVEs whose affected-version data names the magic_nx15 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-112372Medium· 6.6H3C Magic NX15 upload importprofile path traversal
A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely.…
CVE-2026-112373Medium· 6.5H3C Magic NX15 usrlist sub_416874 stack-based overflow
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack rem…
CVE-2026-112370Critical· 9.9H3C Magic NX15 usrlist sub_416874 os command injection
A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The e…
CVE-2026-112371Critical· 9.9H3C Magic NX15 RPC esps write code injection
A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can …