CVE-2026-3701
Last modified
CVE-2026-3701 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function Edit_BasicSSID_5G of the file /goform/aspForm. EPSS estimates a 0.69% chance of exploitation in the next 30 days.
Description
A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function Edit_BasicSSID_5G of the file /goform/aspForm. Such manipulation of the argument param leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| H3c | Magic B1 Firmware | <= 100r004 |
References
- https://github.com/saltedfisholdxu/vul/blob/main/Magic%20B1/6_b1-report.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.349647Permissions Required, VDB Entry
- https://vuldb.com/?id.349647Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.765771Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-3701?
How severe is CVE-2026-3701?
How do I fix CVE-2026-3701?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-36962SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthe…7.3
- CVE-2026-3697A vulnerability was determined in Planet ICG-2510 1.0_202508…6.3
- CVE-2026-3698A vulnerability was identified in UTT HiPER 810G up to 1.7.7…8.8
- CVE-2026-36983D-Link DCS-932L v2.18.01 is vulnerable to Command Injection …7.3
- CVE-2026-3699A security flaw has been discovered in UTT HiPER 810G up to …8.8
- CVE-2026-3700A weakness has been identified in UTT HiPER 810G up to 1.7.7…8.8
- CVE-2026-3702A vulnerability was detected in SourceCodester Loan Manageme…6.1
- CVE-2026-3703A flaw has been found in Wavlink NU516U1 251208. This affect…9.8
- CVE-2026-3704A vulnerability has been found in Wavlink NU516U1 251208. Th…7.2
- CVE-2026-3705A vulnerability was found in code-projects Simple Flight Tic…9.8
- CVE-2026-3706A vulnerability was determined in mkj Dropbear up to 2025.89…3.7
- CVE-2026-3707A vulnerability was identified in MrNanko webp4j up to 1.3.x…5.3
Are you affected by CVE-2026-3701?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST