Live › vulnerability › CVE-2026-112373
Go to dashboardH3C Magic NX15 firmware V100R017 has a stack-based buffer overflow in the function sub_416874 of /usr/bin/usrlist. A remote attacker can trigger it to corrupt memory on the device, and public exploit code exists.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Owners of H3C Magic NX15 devices running firmware V100R017 are affected. The sources do not say which configurations or network exposure are required, so unknown whether a default install is reachable.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
This page as .md · .json · in your agent: get_signal("CVE-2026-112373")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.