Unrated severityNVD Advisory· Published Aug 4, 2026
H3C NX15 esps add command injection
CVE-2026-18811
Description
A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Performing a manipulation of the argument esps.filter.url results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Patches
Vulnerability mechanics
References
5- github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/esps_filter_url_add_root_rcemitreexploit
- vuldb.com/cve/CVE-2026-18811mitrethird-party-advisory
- vuldb.com/submit/857807mitrethird-party-advisory
- vuldb.com/vuln/385810mitrevdb-entrytechnical-description
- vuldb.com/vuln/385810/ctimitresignaturepermissions-required
News mentions
0No linked articles in our index yet.