CVE-2026-112371

CRITICAL 9.9CVE-2026-112371 · Published 19/10/2026 · updated 20/10/2026

In short

CVE-2026-112371 is a CRITICAL (CVSS 9.9) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 45.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

References

XxingGoD/H3C-NX15-R017-Vulns
vuldb.com/cve/CVE-2026-112371
vuldb.com/submit/983538
vuldb.com/vuln/422417
vuldb.com/vuln/422417/cti

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free