Skip to content
Threat Feed
Subscribe

Tag

H3c

4 briefs RSS
high advisory

SQL Injection Vulnerability in H3C SecPath F1000-C8300 (CVE-2026-15907)

A SQL injection vulnerability, CVE-2026-15907, exists in H3C SecPath F1000-C8300 appliances up to version 20260522, allowing remote attackers to manipulate the 'subject' argument in the '/webui/?g=log_fw_nbc_mail_jsondata' endpoint to execute arbitrary SQL commands, potentially leading to unauthorized data access or system compromise, with a publicly available exploit.

SecPath F1000-C8300 sql-injection web-vulnerability h3c cve
1r 1t 1c 5i
critical advisory

H3C Magic B0 Buffer Overflow Vulnerability (CVE-2026-9393)

A buffer overflow vulnerability (CVE-2026-9393) exists in the Edit_BasicSSID_5G function of H3C Magic B0 devices up to version 100R002, allowing remote attackers to execute arbitrary code by manipulating the 'param' argument in the /goform/aspForm file.

Magic B0 buffer-overflow cve-2026-9393 h3c
2r 1t 1c
critical advisory

H3C Magic B1 Router Buffer Overflow Vulnerability

A buffer overflow vulnerability (CVE-2026-6581) in H3C Magic B1 routers allows remote attackers to execute arbitrary code by manipulating the 'param' argument in the SetMobileAPInfoById function.

cve-2026-6581 buffer-overflow router h3c
2r 1t 1c
critical advisory

H3C Magic B0 Router Buffer Overflow Vulnerability (CVE-2026-6560)

A buffer overflow vulnerability (CVE-2026-6560) in H3C Magic B0 up to 100R002 allows remote attackers to execute arbitrary code by manipulating the 'param' argument in the Edit_BasicSSID function of the /goform/aspForm file.

buffer overflow cve-2026-6560 h3c router network device
2r 1t 1c