{"id":"CVE-2026-18813","published":"2026-08-04T21:16:36.053","lastModified":"2026-08-05T15:16:42.863","description":"A vulnerability has been found in H3C NX15 V100R017. This affects the function delete of the file /api/esps. The manipulation of the argument esps.apcm.version leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.","cvssScore":7.2,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-74","CWE-77"],"vendors":[],"products":[],"references":[{"url":"https://github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/esps_apcm_version_delete_root_rce","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-18813","tags":[]},{"url":"https://vuldb.com/submit/857811","tags":[]},{"url":"https://vuldb.com/vuln/385812","tags":[]},{"url":"https://vuldb.com/vuln/385812/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/coconut652-7/IOT_Vul_Public/tree/main/H3C/NX15R017/esps_apcm_version_delete_root_rce","tags":[]}],"hasPoc":true,"ai":{"summary":"The vulnerability allows command injection through manipulation of the 'esps.apcm.version' argument in the '/api/esps' endpoint, enabling remote code execution.","exploitability":"Exploitation is relatively straightforward given public disclosure and requires access to the affected H3C NX15 V100R017 system.","blast_radius":"If exploited, this could lead to complete control of the affected device, potentially impacting network security and integrity.","remediation":"Apply vendor patches or disable the vulnerable '/api/esps' endpoint immediately.","tags":["rce","web","remote-code-execution"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T07:01:50.611Z"}}