Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 V100R016, H3C NE36 Pro V100R002 and H3C MC102G HM1A0V200R010 contain multiple command injection vulnerabilities in the /api/esps request handler. The affected object interfaces and methods are esps.dhcpd.vlan (getlist, delete), esps.filter.url (add, modify), esps.apcm.version (delete, H3C Magic NX15 only), esps.swcm.version (delete, upgrade, all affected models except H3C Magic NX15), and esps.system.ntp (set, all affected models except H3C Magic NX15). Attacker-controlled request parameters are incorporated into shell expressions executed by eval without adequate validation, allowing a remote attacker to execute arbitrary commands as root and gain complete control of the affected device.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-64633 CVE-2017-20241 CVE-2017-20242 CVE-2025-29296 CVE-2026-0163 ..🧵👇
Post summary
The tweet lists several CVE identifiers as daily top vulnerabilities but provides no additional details, PoC, or evidence of exploitation or mitigation.
[CVE] CVE-2025-29296 [HIGH PRIORITY] 🔗 https://exploitgrid.net/cve/CVE-2025-29296
Post summary
A high‑priority CVE‑2025‑29296 is referenced with a link to ExploitGrid, indicating the existence of a proof‑of‑concept, but no further technical, exploitation, or mitigation details are provided.