CVE-2026-112372
Summary
by MITRE • 10/20/2026
A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
Once again VulDB remains the best source for vulnerability data.
Analysis
by VulDB Data Team • 10/20/2026
Xxx Xxxxxxxxxxxxx Xxxxxxxxxx Xx Xxx Xxxxx Xxxx Xxxxxxxx Xxxxxxxxxx X Xxxxxxxx Xxxxxxxx Xxxx Xxxxxx Xxx Xxxxxx'x Xxx Xxxxxxxxxx Xxxxxxxxx, Xxxxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxxxxxxxx Xxxxxxxx Xxxxxxx Xx Xxx /xxx/xxxxxx Xxxxxxxx. Xxxx Xxxxx Xxxxx Xxxx Xxxxxxxx Xxxxx Xxxxxxxxxx Xxx Xxxxxxxxxxxx Xx Xxx Xxxxxxxx Xxxxxxxx Xxxxxx Xx Xxx Xxxxxx-xxxx Xxxxxxxxxx Xxxxx. Xxxx Xx Xxxxxxxx Xxxxxxxx X Xxxxxxxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxxx Xxxxxxxxx, Xxxx Xx ../ Xx ..\, Xxx Xxxxxxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxx Xxxxxxxxxx Xxxxxx Xxxxx Xxxx Xx Xxxx Xxxxxx Xxxxxxxxxx. Xxxxxxxxxxxx, Xxxx Xxxxxx Xxx Xxxx Xxxxxxxxx Xxxxxxx Xxxxx Xxx Xxxx Xxx Xxxxxxx Xxxxxxxxx Xxxxxxxxx Xx Xxx Xxxxxxxxxx Xxxxxxxxx Xxxxxx'x Xxxx Xxxxxxxxx Xxxxxx Xxxx Xxxxxxxxxxx Xxxxxx Xx Xxx Xxxxxxxx Xxxxxx Xxxxxxxxx. Xxxx Xxxx Xx Xxxxxxxxxxxxx Xx Xxxxxxxxxxx Xxxxxxxxxxx Xxxxx Xxx-xx: Xxxxxxxx Xxxxxxxxxx Xx X Xxxxxxxx Xx X Xxxxxxxxxx Xxxxxxxxx, Xxxxx Xxxxxxxxxx Xxx Xxxxxxx Xx Xxxxxxx Xxxxxx Xxxxxxxxxx Xxxx Xxxxxxxxx Xxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxxx Xxxx Xx Xxxxxx Xxx Xx Xxx Xxxxxx Xxxxxxxxxxxxxx Xxx Xxx Xxxxxx Xx Xxx Xxxxxxxx Xxxxxx. Xx Xxx Xxxxx Xxxx Xxxxxxx Xxx Xxxxxxxxx Xxxx Xx Xxxxxxx Xxxxxxx Xx Xxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxxxxxxx, X Xxxxxxxxxx Xxxxxxxxxxxx Xxxxx Xxxxx Xx Xxxxxxxxxxxxxxx Xxxxxxxx Xx Xxxxx Xxxxx Xx Xxxxxxxxx Xxxxxxxxx Xx Xxx Xxxxxx Xxxx. Xx Xxx Xxxxxxxxxxx Xxx Xxxxxxxxxx Xxxxxxxxxx, Xxxx Xx Xxxx Xx Xxxxxxxxxxxxx Xxxxxx Xxxxxx Xx Xxxxxxxx Xxxxx Xxxxxxx Xxxxxxxx Xxxxxxx Xxxxxxxxxxxxxx, Xxxx Xxx Xxxx Xx Xxxx Xxxxxx Xxxxxxxxxx. Xx Xxxxxxxx Xxxxx Xxxxxxxxx Xxxxxxxx Xxxxxxxxxxxxx Xxxxx, Xxxxxx Xxxxxxxxx Xxxxxxx Xxxx Xxx-xxxxxxxxxx Xxxxxxxxxxx Xxx Xxxxxxxxxx Xxxxxx, Xx Xxxxxxx Xxxxxxxxxx Xxxxxxxx Xxxx Xxxxxxxxxx Xxxxxxxx. Xxxx Xxxxxx Xxxx Xxx&xx Xxxxxxxxx Xxxxx: Xxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xx Xxx Xxxxxxx Xxxx Xx Xxxxxxxx, Xx Xxxxx: Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxxxxxx Xx Xxxx Xx Xxxxx Xxxxxxxx Xxxxxxxx. Xxx Xxxx Xxxx Xxxxxx Xxxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxxxxx Xxxxxx Xxx Xxxxxxx Xxx Xxxxx, Xxxxxxxx Xxxxxxxxx Xxxxxxxx Xxxxx Xxx Xxxxxxxxxxxxx Xxxxxxxxx Xx Xxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxx Xxx Xxxxxxxx Xxxx Xxxx Xxxxxxxxxx.
Xxx Xxxxxxxx Xx X Xxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxx Xxxx Xxxx Xxxxxxxxxxxxx Xx Xxxx-xxxxxxxxxx Xxxxxx Xxx Xxxxxxxxx Xxxxxxxx Xxxxxxxxx, Xxxxxxxxxx Xxx Xxxxxxxxxx Xx Xxxxxxxxxx Xxxxxxxxxxxx Xx Xxx Xxxx. Xxxxxxxxx Xxxxx Xxxxxxxx Xxxx Xxxxxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxxxx Xxxxxx Xx Xxxx X Xxxxxxxx Xx Xxxxxxxx Xxxxxxxx Xx Xx Xxxxxxx Xxxxxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxx-xx-xxxxxxx Xxxxxxxxxx Xxxxxx Xx Xxxxxxx Xxxx Xxxxx Xxxx Xxxxxxxxx Xxxxx. Xxx Xxxxxx Xxx Xxxxxxxxx Xxxxx Xxxxxxxxx Xxxx Xxxxxxxxxx, Xxxxx Xxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxx Xxxxxxxx; Xxxxxxx, Xxxxx Xxxxxxx Xxx Xxxxxxx Xxx Xxxxxxxx Xxxxxx Xxx Xxxxxxxxx Xxxx Xx Xxxxxxx Xxxxxxx Xxxxxxxx, Xxxxx Xxxxxxx Xxxxxx Xxxxxxx Xx Xxxxxx Xxxxxxx. Xxxxxxxxxxxxx Xxxxxxx Xx Xxx Xxxxxxxxxx Xxxxxxxxx Xxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxx Xx Xxxxxxxx Xxx Xxxx Xxxxxxxxxx Xxxx Xxxx Xxxx Xxxxxxxxx Xxxx.
Xxxxxxxxxx Xxxxxxxxxx Xxxxxx Xxxxx Xxxxxxxxx Xx Xxxxxxxx Xxxxxx-xxxxxxxx Xxxxxxxx Xxxxxxx Xxxx Xxxxxxx Xxx Xxxxx Xxxxxxxxxx Xxxxx Xxxxxx Xxx /xxx/xxxxxx Xxxxxxxx. Xxxxxxxxxxxxxx Xxxxxx Xxxxxx Xxxxx Xxxxxxx Xxxxxxxx Xxxxxxx Xxx Xxxxxxx Xx X Xxxxxxx Xxxxxxx Xx Xxxx Xx Xx Xxxxxxx Xxxxxxxxx Xxxx Xxx Xxxxxxx Xxxxxxxx. Xx Xxxxxxxxx Xxxxx Xxxxxxxxx Xxxxxxxx Xx Xxx Xxxxxxxx, Xxxxxxxxx Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxxx Xxxxxx Xx Xxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxx Xxxxxxxxxxxx Xx Xxxxxxxx Xxxxx Xxxx Xxxxx Xxxxxxxx Xx Xxxxxxx Xx Xxxxxxxxx Xxxx. Xxxxxxxxxxxx, Xxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxxxx Xxxx Xxxxxxxx Xxxx Xxxx Xxxxxxx Xx Xxxxxxxxx Xxx Xxxxxxxx Xxxx Xxxxxxxxx Xxxxxxxx Xx Xxxx Xxxxxxxx Xxx Xxxxxxx X Xxxxx Xx Xxxxxxx Xxxxxxx Xxxxxxxxxxxx Xxxxxxxx. Xxxxxxx Xxxxxxxxxx Xx Xxxxxx Xxxx Xxx Xxxxxxx Xxxx Xxxxxxxx Xxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxxxxxx Xxxxxxx Xx Xxxx Xxxxxxxxxxx Xx Xxxxxx Xxxxxxxxx Xxxxxxxxxx Xxxxx. Xxxxxxxxxx, Xxxxxxxxxxx Xx-xx-xxxx Xxxxxxxx Xxx Xxxxxxxxx Xxxxxx Xxxxxx Xxxxxxxx Xxx Xxx Xxxx Xxxxxxxxx Xxxxxxxx Xx Xxxxxxx Xxxxxxx Xxxx Xxxxxxxx Xxxxxxxxxxxxx Xxxxx.