CVE-2026-6560Disclosure

LOWCVSS 7.4 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A security vulnerability has been detected in H3C Magic B0 up to 100R002. This vulnerability affects the function Edit_BasicSSID of the file /goform/aspForm. Such manipulation of the argument param leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

2.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 7 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 5 signals
  • Disclosure: 4 classified signals
  • General: 2 classified signals
  • Exploit: 1 classified signal
  • Peaked 2d ago at 4 mentions (2026-04-19); latest day: 1
  • 7 total mentions across 4 days

Deep dive

Activity timeline7 mentions / 4d
01234Mentions · 2026-04-18: 1Mentions · 2026-04-19: 4Mentions · 2026-04-20: 1Mentions · 2026-04-28: 1PoC Mentioned / Linked · 2026-04-28: 1Patch / Workaround · 2026-04-20: 1Patch / Workaround · 2026-04-28: 1Technical Details · 2026-04-19: 3Technical Details · 2026-04-20: 1Technical Details · 2026-04-28: 104-1804-1904-2004-28
Signal classification3 categories
Disclosure
457.1%
General
228.6%
Exploit
114.3%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-04-181
Disclosure1
2026-04-194
Disclosure2General2
2026-04-201
Disclosure1
2026-04-281
Exploit1
Full discourse7 posts
  • Giuseppe Paternicola@giuseppe_1337
    Exploit

    🚨 HIGH: CVE-2026-6560 (CVSS 8.8) - Remote buffer overflow in H3C Magic B0 routers (≤100R002). Exploit public. Vendor unresponsive. Patch/mitigate immediately. #CVE #PatchNow #ThreatIntel https://t.co/HcDJt4RHiR

    Post summary

    The tweet highlights a publicly available exploit for CVE-2026-6560, urges immediate patching due to vendor unresponsiveness, and provides basic technical details of the vulnerability.

    0000067
    27 followersView on X
  • CyberWolfGuard@CyberWolfGuard
    Disclosure

    Researchers Disclose new vulns (Apr 19): • CVE-2026-6560: Critical RCE in H3C Magic B0 routers • CVE-2026-6570: Auth bypass in KodExplorer • Flaws in Tenda, Ivanti, Movary Public exploits out, patch ASAP! #CyberSecurity #Infosec #VulnerabilityManagement #PatchNow #CVE2026 https://t.co/wsFownABUZ

    Post summary

    Researchers announced critical RCE (CVE‑2026‑6560) and auth bypass (CVE‑2026‑6570) vulnerabilities, noted that public exploits exist, and urged immediate patching.

    0000076
    10 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-6560 A security vulnerability has been detected in H3C Magic B0 up to 100R002. This vulnerability affects the function Edit_BasicSSID of the file /goform/aspForm. Such manip… https://www.cve.org/CVERecord?id=CVE-2026-6560 ----- Traducción: CVE-2026-6560 Se … http://infoflow.cloud`

    Post summary

    The post announces a newly detected vulnerability in H3C Magic B0 devices, specifying the affected function and file, but provides no exploitation, patch, or PoC details.

    0000037
    72 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-6560 A security vulnerability has been detected in H3C Magic B0 up to 100R002. This vulnerability affects the function Edit_BasicSSID of the file /goform/aspForm. Such manip… https://www.cve.org/CVERecord?id=CVE-2026-6560

    Post summary

    The post announces CVE‑2026‑6560 affecting H3C Magic B0 devices, noting the impacted function/file, but provides no evidence of exploitation, PoC, patch, or detailed technical information.

    00000376
    57.2K followersView on X
  • CTIWatch@ctiwatchcloud
    General

    🔍 Today's Top Vulnerabilities 🔴 CVE-2026-41242 | CVSS 9.4 🟠 CVE-2026-6560 | CVSS 8.8 🔗 http://ctiwatch.cloud/vulnerabilities #CVE #Vulnerability #ThreatIntel

    Post summary

    The post simply lists two high‑severity CVEs with their CVSS scores and a link to a vulnerabilities page, without any PoC, exploit code, patch information, or claims of active exploitation.

    0000075
    5.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-6560 Buffer Overflow in H3C Magic B0 Up to 100R002 Edit_BasicSSID Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6560

    Post summary

    Briefly announces a buffer overflow vulnerability in the H3C Magic B0 device’s Edit_BasicSSID function, providing limited technical detail without evidence of exploitation or mitigation.

    0000049
    4.0K followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    A new vulnerability with increased severity was disclosed for H3C Magic B0 (CVE-2026-6560) https://vuldb.com/vuln/358197

    Post summary

    A new vulnerability, CVE-2026-6560, with increased severity has been disclosed for H3C Magic B0, and a public database link is provided.

    0000070
    2.1K followersView on X

Explore more