---
id: "CVE-2026-112372"
kind: "vulnerability"
aliases: ["CVE-2026-112372"]
title: "H3C Magic NX15 router: upload path traversal lets remote users write files"
severity: "medium"
cvss: 6.6
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["h3c", "infrastructure", "magic-nx15", "network-appliance"]
not_affected_if: []
published_at: "2026-10-19T23:17:36+00:00"
first_seen_at: "2026-10-23T21:57:19+00:00"
updated_at: "2026-10-25T03:47:00+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112372", "first_seen_at": "2026-10-23T21:57:19+00:00"}]
---

# H3C Magic NX15 router: upload path traversal lets remote users write files

The H3C Magic NX15 V100R017 web upload endpoint /api/upload, in the importprofile function, does not sanitize the fileName argument, so path traversal sequences can write files outside the intended directory. A remote attacker can trigger it and a public exploit is available, which could let them place files on the device.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-23T21:57:19+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112372

## From the sources

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_