CVE-2026-112372 | H3C Magic NX15 V100R017 /api/upload importprofile fileName path traversal

October 19, 2026 Yanac

A vulnerability marked as critical has been reported in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal.

The identification of this vulnerability is CVE-2026-112372. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More