CVE-2026-18901 | H3C NX15 V100R017 Web API /api/esps service.add routine

August 4, 2026 Yanac

A vulnerability labeled as critical has been found in H3C NX15 V100R017. Affected is the function service.add of the file /api/esps of the component Web API. Such manipulation leads to exposed dangerous routine.

This vulnerability is traded as CVE-2026-18901. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More