CVE-2026-18812

Received Received - Intake

Command Injection in H3C NX15 V100R017

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: VulDB

Description

A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Executing a manipulation of the argument workMode can lead to command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-04

Generated

2026-08-05

AI Q&A

2026-08-05

EPSS Evaluated

N/A

NVD

CVE-2026-18812

EUVD

EUVD-2026-52898

Affected Vendors & Products

Vendor	Product	Version / Range
h3c	nx15	v100r017

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-77	The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
CWE-74	The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is a command injection flaw in H3C NX15 V100R017. It exists in the esps.ipv6.wan function of the /api/esps file. An attacker can manipulate the workMode argument to execute arbitrary commands remotely. The exploit is publicly available and the vendor was notified.

Impact Analysis

This vulnerability allows remote attackers to execute arbitrary commands on the affected system. This could lead to unauthorized access, data theft, system compromise, or disruption of services. Systems using H3C NX15 V100R017 are at risk if exposed to untrusted networks.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR and HIPAA requirements for data protection and access control. Organizations may face compliance penalties, legal consequences, and reputational damage if exploited.

Mitigation Strategies

Immediately update H3C NX15 V100R017 to the latest patched version. Disable remote access to the /api/esps endpoint if not required. Monitor network traffic for unusual commands or activity targeting the workMode parameter. Apply network-level restrictions to limit access to vulnerable services.

Hi! I’m here to help you understand CVE-2026-18812. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70