Missing Authentication in H3C NX15 V100R017 Network Setup Function
CVE-2026-18810

6.9MEDIUM

Key Information:

Vendor

H3c
Status
Nx15
Vendor
CVE Published:
4 August 2026

What is CVE-2026-18810?

A security concern has been identified in H3C NX15 V100R017, specifically impacting an undocumented function within the /api/wizard/networkSetup file. This vulnerability allows for missing authentication, enabling potential attackers to exploit the function remotely. Prompt action from the vendor was initiated upon disclosure to mitigate the risks involved.

Affected Version(s)

NX15 V100R017

References

https://vuldb.com/vuln/385809
vdb-entry
https://vuldb.com/vuln/385809/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-18810
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

coconut (VulDB User)
VulDB CNA Team
.