CVE-2026-3701

A security vulnerability has been detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function Edit_BasicSSID_5G of the file /goform/aspForm. Such manipulation of the argument param leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-119
• CWE-120

• https://github.com/saltedfisholdxu/vul/blob/main/Magic%20B1/6_b1-report.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.349647Permissions Required, VDB Entry
• https://vuldb.com/?id.349647Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.765771Third Party Advisory, VDB Entry

Published

Mar 8, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-37003Agno up to and including 2.5.8 is vulnerable to Remote Code …9.8
• CVE-2026-37004BerriAI litellm <=1.82.4 is vulnerable to Server-Side Templa…9.8
• CVE-2026-37006A vulnerability in the WebSocket endpoint of gpt-researcher …9.8
• CVE-2026-37007A vulnerability in FileWriterTool in crewai-tools <= 1.10.2r…9.8
• CVE-2026-37008CrewAI before fb2323b offers a Python blocklist approach tha…8.1
• CVE-2026-37009A SQL injection vulnerability in NL2SQLTool in crewai-tools …6.5
• CVE-2026-37012A vulnerability in pentestgpt/core/langfuse.py in PentestGPT…7.5
• CVE-2026-3702A vulnerability was detected in SourceCodester Loan Manageme…6.1
• CVE-2026-3703A flaw has been found in Wavlink NU516U1 251208. This affect…9.8
• CVE-2026-3704A vulnerability has been found in Wavlink NU516U1 251208. Th…7.2
• CVE-2026-3705A vulnerability was found in code-projects Simple Flight Tic…9.8
• CVE-2026-3706A vulnerability was determined in mkj Dropbear up to 2025.89…3.7