CVE-2026-2086: UTT HiPER 810G Management formFireWall strcpy buffer overflow
A vulnerability was detected in UTT HiPER 810G up to 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formFireWall of the component Management Interface. The manipulation of the argument GroupName results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2086?
CVE-2026-2086 is classified as a critical vulnerability due to its potential for causing buffer overflow, which may lead to remote code execution.
How do I fix CVE-2026-2086?
To fix CVE-2026-2086, upgrade the UTT HiPER 810G software to version 1.7.7-171115 or later.
What systems are affected by CVE-2026-2086?
CVE-2026-2086 affects UTT HiPER 810G versions up to and including 1.7.7-171114.
What type of vulnerability is CVE-2026-2086?
CVE-2026-2086 is a buffer overflow vulnerability stemming from the improper use of the strcpy function in the management interface.
Can exploitation of CVE-2026-2086 be mitigated?
Exploitation of CVE-2026-2086 can be mitigated by applying security patches and ensuring that administrative access to the device is restricted.