CVE-2026-8764 | H3C Magic B3 up to 100R002 /goform/aspForm UpdateWanParams param buffer overflow

A vulnerability labeled as critical has been found in H3C Magic B3 up to 100R002. This affects the function UpdateWanParams of the file /goform/aspForm. Such manipulation of the argument param leads to buffer overflow.

This vulnerability is listed as CVE-2026-8764. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.