PT-2026-33611 · H3C · Magic B0

Xyhackr · Published 2026-04-18 · Updated 2026-04-19 · CVE-2026-6560

Mitre

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A security vulnerability has been detected in H3C Magic B0 up to 100R002. This vulnerability affects the function Edit BasicSSID of the file /goform/aspForm. Such manipulation of the argument param leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-6560

Affected Products

Magic B0

References · 8

• 🔥 https://github.com/xiaohaiyang-ai/CVE-Reports/blob/main/Vulnerability-Report.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-6560 · Security Note
• https://vuldb.com/vuln/358197 · Note
• https://vuldb.com/vuln/358197/cti · Note
• https://twitter.com/vuldb/status/2045536230167966140 · Twitter Post
• https://twitter.com/ctiwatchcloud/status/2045834813110653061 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2045770331290230970 · Twitter Post
• https://vuldb.com/submit/788021 · Note