CVE-2026-9393

HighCVSS 8.8

Published: 24/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile - higher than 36% of all known CVEs

Summary

A buffer overflow vulnerability was found in H3C Magic B0 routers up to 100R002 in the Edit_BasicSSID_5G function of /goform/aspForm. The attack can be launched remotely and the exploit is public.

Risk Assessment

Buffer overflow could allow remote code execution, leading to full device compromise and network infiltration.

Recommendation

Disable remote access to the admin panel immediately and contact the vendor for patches.

Other vulnerabilities in H3C Magic B0

CVE-2026-10259High
In H3C Magic B0 up to version 100R002, a vulnerability exists in the SetMobileAPInfoById function of the /goform/aspForm file. Manipulation of the param argument leads to a stack-based buffer overflow, which can be exploited remotely. The exploit has been publicly disclosed.

Original NVD description (English source)

A vulnerability was found in H3C Magic B0 up to 100R002. This affects the function Edit_BasicSSID_5G of the file /goform/aspForm. Performing a manipulation of the argument param results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.