CVE-2026-18810: H3C NX15 networkSetup missing authentication
Published Aug 4, 2026
·Updated
A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard/networkSetup. Such manipulation leads to missing authentication. The attack may be performed from remote. The vendor was contacted early about this disclosure.
Affected Software
1 affected component
H3C NX15=V100R017
Event History
Aug 4, 2026
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-18810?
The severity of CVE-2026-18810 is rated as high with a score of 7.3.
2
How do I fix CVE-2026-18810?
To fix CVE-2026-18810, ensure that appropriate authentication mechanisms are implemented for the /api/wizard/networkSetup function.
3
What systems are affected by CVE-2026-18810?
CVE-2026-18810 affects the H3C NX15 V100R017 software version.
4
What is the impact of CVE-2026-18810?
The impact of CVE-2026-18810 is a lack of authentication that could allow remote attackers to manipulate the affected function.
5
When was CVE-2026-18810 published?
CVE-2026-18810 was published on August 4, 2026.