---
id: "CVE-2026-126759"
page: "https://infrastack.ai/live/CVE-2026-126759"
kind: "vulnerability"
aliases: ["CVE-2026-126759"]
title: "H3C ICG2000 gateway: web management page lacks authentication, remote attack"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["h3c", "icg2000", "infrastructure", "network-appliance", "unified-communications"]
not_affected_if: ["management-interface-not-exposed", "no-icg2000-deployed"]
published_at: "2026-11-12T00:17:14+00:00"
first_seen_at: "2026-11-12T00:39:17+00:00"
updated_at: "2026-11-12T00:40:17+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126759", "first_seen_at": "2026-11-12T00:39:17+00:00"}]
exploit_sources: []
---

# H3C ICG2000 gateway: web management page lacks authentication, remote attack

Link for people: https://infrastack.ai/live/CVE-2026-126759 (this .md is for agents)

A flaw in the Web Management Module of the H3C ICG2000 Unified Communication Gateway 2023 lets a remote attacker reach the file /wnm/check.j without authentication. A public exploit has been published, and the vendor has acknowledged the report but has not released a fix.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the H3C ICG2000 gateway is running a 2023 build and whether its web management interface is reachable from the internet or untrusted networks.

## Timeline

- 2026-11-12T00:39:17+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126759

## From the sources

A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue affects some unknown processing of the file /wnm/check.j of the component Web Management Module. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used. The researcher claims that the vendor has acknowledged receipt of the vulnerability report. No further response has been received.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_