H3C has 6 CVEs on record. Disclosure cadence is accelerating: 6 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 6. The median CVSS is 8.2 (high), with 3 rated critical. None have a confirmed exploitation report. Most affected products: Magic NX15 (4), CVM (1), HDM Family-A G5 (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.2
- Publish → KEV
- —
- Last 90 days
- 6 prev 0
Products
- Magic NX15 4
- CVM 1
- HDM Family-A G5 1
Worst active — by depth score
CVE-2026-112371Critical· 9.9H3C Magic NX15 RPC esps write code injection67CVE-2026-112370Critical· 9.9H3C Magic NX15 usrlist sub_416874 os command injection67CVE-2023-54405Critical· 9.8H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary …66CVE-2026-112373Medium· 6.5H3C Magic NX15 usrlist sub_416874 stack-based overflow48CVE-2026-112372Medium· 6.6H3C Magic NX15 upload importprofile path traversal48
H3C vulnerabilities
CVEs affecting H3C, newest first. Open any entry for full detail, references, and exploit status.
6 CVEsRSS
CVE-2026-112372Medium· 6.6PoCH3C Magic NX15 upload importprofile path traversal
A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely.…
CVE-2026-112373Medium· 6.5PoCH3C Magic NX15 usrlist sub_416874 stack-based overflow
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack rem…
CVE-2026-112370Critical· 9.9PoCH3C Magic NX15 usrlist sub_416874 os command injection
A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The e…
CVE-2026-112371Critical· 9.9PoCH3C Magic NX15 RPC esps write code injection
A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can …
CVE-2026-65197Low· 3.1H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/conf/public.pem`
H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/conf/public.pem`. That file is writable by an authenticated Redfish client through the `UpdateService.UploadSignKey` ac…
CVE-2023-54405Critical· 9.8PoCH3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary …
H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary …