CVE-2026-126759H3C ICG2000 Unified Communication Gateway Web Management check.j missing authentication

Descripción

A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue affects some unknown processing of the file /wnm/check.j of the component Web Management Module. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used. The researcher claims that the vendor has acknowledged receipt of the vulnerability report. No further response has been received.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• VDB-435869 | H3C ICG2000 Unified Communication Gateway Web Management check.j missing authentication vdb-entry
• VDB-435869 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-required
• CVE-2026-126759 | CVE Analysis and Report third-party-advisory
• Submit #1035822 | H3C (New H3C Technologies Co., Ltd.) `ICG2000 Unified Communication Gateway (ICG 2000 Information Communication Gateway), web management module ICG2000, firmware generation 2023 (dev third-party-advisory