CVE-2026-3943: h3c ACG1000-AK230

High severity, CVSS 7.3. EPSS: 4.8% chance of exploitation in the next 30 days.

A vulnerability was found in H3C ACG1000-AK230 up to 20260227. This affects an unknown part of the file /webui/?aaa_portal_auth_local_submit. The manipulation of the argument suffix results in command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor is investigating and remediating this issue.

Affected products

• h3c ACG1000-AK230: version 20260227 only

Published 2026-03-11. Last modified 2026-06-17.