{"id":"CVE-2026-112373","published":"2026-10-20T00:17:30.750","lastModified":"2026-10-20T00:17:30.750","description":"A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.","cvssScore":6.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-119","CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_stack_overflow_dos","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-112373","tags":[]},{"url":"https://vuldb.com/submit/983540","tags":[]},{"url":"https://vuldb.com/vuln/422421","tags":[]},{"url":"https://vuldb.com/vuln/422421/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_stack_overflow_dos","tags":[]}],"hasPoc":true,"ai":null}