CVE Tools
Track your stack

Magic NX15

18 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Magic NX15, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Magic NX15 CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Magic NX15 CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-036
2025-048
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-104

Severity

How the 18 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical211%
  • High1478%
  • Medium211%

Latest CVEs

The 15 most recently published vulnerabilities affecting Magic NX15.

  1. CVE-2026-112373H3C Magic NX15 usrlist sub_416874 stack-based overflow6.5
  2. CVE-2026-112372H3C Magic NX15 upload importprofile path traversal6.6
  3. CVE-2026-112371H3C Magic NX15 RPC esps write code injection9.9
  4. CVE-2026-112370H3C Magic NX15 usrlist sub_416874 os command injection9.9
  5. CVE-2025-3546H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection8.0
  6. CVE-2025-3545H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injection8.0
  7. CVE-2025-3544H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection8.0
  8. CVE-2025-3543H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injection8.0
  9. CVE-2025-3542H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injection8.0
  10. CVE-2025-3541H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injection8.0
  11. CVE-2025-3540H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injection8.0
  12. CVE-2025-3539H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injection8.0
  13. CVE-2025-2732H3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection8.0
  14. CVE-2025-2731H3C Magic BE18000 HTTP POST Request getDualbandSync command injection8.0
  15. CVE-2025-2730H3C Magic BE18000 HTTP POST Request getssidname command injection8.0

Product grouping is registry-driven, with AI assist and human review. How it works