CVE-2026-112370: H3C Magic NX15 usrlist sub_416874 os command injection
Published Oct 19, 2026
·Updated
A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
Affected Software
1 affected component
H3C Magic NX15=100R017
Event History
Oct 19, 2026
CVE Published
via MITRE·10:15 PM
Data Sourced
via MITRE·10:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
The affected product and version identified are H3C Magic NX15 devices running 100R017. The issue is in the /usr/bin/usrlist component, specifically the sub_416874 function.
2
What access does an attacker need to exploit this?
The vulnerability is remotely exploitable over the network and requires low privileges. No user interaction is required.
3
Is public exploit information available?
Yes. The available data states that an exploit has been made public and could be used.