Skip to content
Threat Feed
Subscribe

Product

NX15 V100R017

1 brief RSS
high threat

H3C NX15 Weak Password Recovery Vulnerability (CVE-2026-15479)

A critical vulnerability, CVE-2026-15479, in H3C NX15 V100R017 allows remote attackers to perform weak password recovery by manipulating the 'newPass' argument in the '/api/login/modify' endpoint, leading to unauthorized administrator access.

exploited NX15 V100R017 vulnerability api-exploitation password-reset network-device remote-access
2t 1c 5i