CVE-2026-2188: UTT 进取 521G formPdbUpConfig sub_446B18 os command injection

Published Feb 8, 2026
·
Updated

A vulnerability was determined in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the argument policyNames can lead to os command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected Software

3 affected components
UTT UTT 进取 521G
All of the following
UTT 521g Firmware=3.1.1-190816
UTT 521G=2.0

Event History

Feb 8, 2026
CVE Published
via MITRE·09:32 PM
Data Sourced
via MITRE·09:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-2188?

CVE-2026-2188 has been classified with a medium severity due to the potential for OS command injection.

2

How do I fix CVE-2026-2188?

To fix CVE-2026-2188, apply the latest software updates from the vendor that address the OS command injection vulnerability.

3

Which software is affected by CVE-2026-2188?

CVE-2026-2188 affects UTT 进取 521G versions 3.1.1-190816.

4

What type of vulnerability is CVE-2026-2188?

CVE-2026-2188 is an OS command injection vulnerability that can be exploited via manipulated arguments.

5

What is the impact of exploiting CVE-2026-2188?

Exploiting CVE-2026-2188 can allow an attacker to execute arbitrary commands on the affected system.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203