CVE-2026-18810: h3c NX15

High severity, CVSS 7.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard/networkSetup. Such manipulation leads to missing authentication. The attack may be performed from remote. The vendor was contacted early about this disclosure.

Affected products

• h3c NX15: version V100R017 only

Published 2026-08-04. Last modified 2026-08-12.