CVE-2026-0841: UTT 进取 520W formPictureUrl strcpy buffer overflow
A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formPictureUrl. The manipulation of the argument importpictureurl results in buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0841?
CVE-2026-0841 is classified as a high severity vulnerability due to the potential for remote exploitation leading to buffer overflow.
How do I fix CVE-2026-0841?
To fix CVE-2026-0841, update the UTT 进取 520W firmware to the latest version provided by the vendor.
What type of vulnerability is CVE-2026-0841?
CVE-2026-0841 is a buffer overflow vulnerability that can be exploited remotely through the strcpy function.
Can CVE-2026-0841 be exploited remotely?
Yes, CVE-2026-0841 can be exploited remotely, allowing attackers to manipulate the argument and trigger a buffer overflow.
Which product is affected by CVE-2026-0841?
CVE-2026-0841 affects the UTT 进取 520W model running version 1.7.7-180627.