CVE-2026-126759 · Infrastructure
NO FIX YET
A flaw in the Web Management Module of the H3C ICG2000 Unified Communication Gateway 2023 lets a remote attacker reach the file /wnm/check.j without authentication. A public exploit has been published, and the vendor has acknowledged the report but has not released a fix.
first public Nov 12, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Organisations running the H3C ICG2000 Unified Communication Gateway 2023 with its web management interface exposed. The sources do not say whether default configuration is affected. Teams with no ICG2000 deployment can skip it.
Not affected if management-interface-not-exposed, no-icg2000-deployed
Who cares h3c, icg2000, network-appliance, unified-communications
No fix yet, per the sources.
A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue affects some unknown processing of the file /wnm/check.j of the component Web Management Module. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used. The researcher claims that the vendor has acknowledged receipt of the vulnerability report. No further response has been received.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.