A security vulnerability has been detected in H3C Magic B0 up to 100R002. The affected element is the function SetMobileAPInfoById of the file /goform/aspForm. …

A stack-based buffer overflow vulnerability (CVE-2026-10259) has been discovered in H3C Magic B0 devices up to version 100R002. The vulnerability exists in the SetMobileAPInfoById function within the /goform/aspForm file, where manipulation of the param argument leads to the buffer overflow condition. This vulnerability can be exploited remotely by attackers. Public exploits have been disclosed and are available for use. The vendor was notified of this security issue but has not provided any response or acknowledgment.