CVE WATCH / VULNERABILITY DETAIL
CVE-2026-65197
LOWCVSS 3.1NVD feed
Published 13 October 2026 · tracked since 14 October 2026
Description
H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/conf/public.pem`. That file is writable by an authenticated Redfish client through the `UpdateService.UploadSignKey` action, which stores the uploaded body verbatim after validating
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-53418 HIGH 8.1
- CVE-2026-109521 HIGH 7.3
- CVE-2026-109522 HIGH 7.3
- CVE-2026-109523 HIGH 7.3
- CVE-2026-108184 HIGH 7.4
- CVE-2026-106108
- CVE-2026-107460
- CVE-2026-102342 MEDIUM 5.4
- CVE-2026-74036 HIGH 7.2
- CVE-2026-109960 HIGH 7.7