CVE-2026-18810
Received Received - Intake

Authentication Bypass in H3C NX15 V100R017

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: VulDB

Description
A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard/networkSetup. Such manipulation leads to missing authentication. The attack may be performed from remote. The vendor was contacted early about this disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-05
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-18810
EUVD
EUVD-2026-52891

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
h3c nx15 v100r017

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a missing authentication flaw in H3C NX15 V100R017 affecting the /api/wizard/networkSetup endpoint. It allows unauthorized modification of WAN settings without requiring authentication, enabling remote attackers to alter network configurations.

Detection Guidance

Check if the /api/wizard/networkSetup endpoint is accessible without authentication. Use tools like curl to send a GET or POST request to the endpoint and verify if it responds without requiring credentials. Example: curl -v http://<target-ip>/api/wizard/networkSetup

Inspect network traffic for unauthorized POST requests to /api/wizard/networkSetup. Use Wireshark or tcpdump to capture and analyze traffic targeting this path.

Impact Analysis

An attacker could exploit this to change network settings, potentially disrupting internet access, redirecting traffic, or exposing sensitive data. Since no authentication is needed, the risk is high for unpatched systems.

Compliance Impact

This vulnerability could lead to unauthorized network changes, potentially violating data integrity and confidentiality requirements in GDPR and HIPAA. Non-compliance may result if proper access controls are not enforced.

Mitigation Strategies

Apply the latest firmware update from H3C to patch the vulnerability. If no update is available, restrict access to the /api/wizard/networkSetup endpoint via firewall rules or disable the endpoint if possible.

Monitor network traffic for suspicious activity targeting the vulnerable endpoint. Implement network segmentation to limit exposure of the affected system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18810. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart