Is CVE-2026-18811 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18811?

CVE-2026-18811 has a CVSS v3 severity of HIGH (7.2).

Back

CVE-2026-18811

Description

A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Performing a manipulation of the argument esps.filter.url results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.