CVE-2026-18813: H3C NX15 esps delete command injection
Published Aug 4, 2026
·Updated
A vulnerability has been found in H3C NX15 V100R017. This affects the function delete of the file /api/esps. The manipulation of the argument esps.apcm.version leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
Affected Software
1 affected component
H3C NX15=V100R017
Event History
Aug 4, 2026
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-18813?
CVE-2026-18813 has a high severity score of 7.2.
2
How do I fix CVE-2026-18813?
To fix CVE-2026-18813, update the H3C NX15 firmware to the latest version recommended by the vendor.
3
What type of vulnerability is CVE-2026-18813?
CVE-2026-18813 is a command injection vulnerability.
4
Can CVE-2026-18813 be exploited remotely?
Yes, CVE-2026-18813 can be exploited remotely.
5
What specific component is affected in CVE-2026-18813?
The affected component in CVE-2026-18813 is the delete function of the /api/esps endpoint.