h3c NX15 vulnerabilities

9 CVEs affecting h3c NX15, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-18902, published 2026-08-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-18902, published 2026-08-05. High severity, CVSS 7.2. EPSS: 3.8% chance of exploitation in the next 30 days. A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerability is the function esps.wan.repeater.set/repeaterproc of the file /api/esps. Performing a manipulation of the argument…
CVE-2026-18900, published 2026-08-05. High severity, CVSS 7.2. EPSS: 3.8% chance of exploitation in the next 30 days. A weakness has been identified in H3C NX15 V100R017. This impacts the function file.exec of the file /api/esps of the component Backend RPC. This manipulation of the argument File causes os command…
CVE-2026-18814, published 2026-08-04. High severity, CVSS 7.2. EPSS: 3.6% chance of exploitation in the next 30 days. A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of the file /api/esps. The manipulation results in command injection. The attack can be launched…
CVE-2026-18813, published 2026-08-04. High severity, CVSS 7.2. EPSS: 3.6% chance of exploitation in the next 30 days. A vulnerability has been found in H3C NX15 V100R017. This affects the function delete of the file /api/esps. The manipulation of the argument esps.apcm.version leads to command injection. The attack…
CVE-2026-18812, published 2026-08-04. High severity, CVSS 7.2. EPSS: 3.6% chance of exploitation in the next 30 days. A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Executing a manipulation of the argument workMode can lead to command injection.…
CVE-2026-18811, published 2026-08-04. High severity, CVSS 7.2. EPSS: 3.6% chance of exploitation in the next 30 days. A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Performing a manipulation of the argument esps.filter.url results in command…
CVE-2026-18901, published 2026-08-05. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.add of the file /api/esps of the component Web API. Such manipulation leads to exposed dangerous…
CVE-2026-18810, published 2026-08-04. High severity, CVSS 7.3. EPSS: 0.7% chance of exploitation in the next 30 days. A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard/networkSetup. Such manipulation leads to missing authentication. The attack…
CVE-2026-15479, published 2026-07-12. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function change_passwd of the file /api/login/modify of the component Administrator Password Modification…