CVE-2026-18895: UTT HiPER 1250GW APSecurity_5g strcpy stack-based overflow
A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18895?
The severity of CVE-2026-18895 is rated as high with a score of 8.8.
How do I fix CVE-2026-18895?
To fix CVE-2026-18895, update the UTT HiPER 1250GW software to the latest version that addresses the vulnerability.
What type of vulnerability is CVE-2026-18895?
CVE-2026-18895 is a stack-based buffer overflow vulnerability.
Can CVE-2026-18895 be exploited remotely?
Yes, CVE-2026-18895 can be exploited remotely by manipulating the argument 'cipher'.
What potential impact does CVE-2026-18895 have?
CVE-2026-18895 may lead to remote code execution due to the stack-based buffer overflow.