CVE-2026-2846: UTT HiPER 520 Web Management formPdbUpConfig sub_44D264 os command injection
A security vulnerability has been detected in UTT HiPER 520 1.7.7-160105. This impacts the function sub44D264 of the file /goform/formPdbUpConfig of the component Web Management Interface. The manipulation of the argument policyNames leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2846?
CVE-2026-2846 has a high severity due to its potential for remote code execution via OS command injection.
How do I fix CVE-2026-2846?
To fix CVE-2026-2846, update the UTT HiPER 520 to the latest version that addresses this vulnerability.
What systems are affected by CVE-2026-2846?
CVE-2026-2846 affects UTT HiPER 520 version 1.7.7-160105 and potentially earlier versions.
What type of attack can exploit CVE-2026-2846?
CVE-2026-2846 can be exploited through remote OS command injection via the web management interface.
Is CVE-2026-2846 publicly known?
Yes, CVE-2026-2846 is publicly known and documented as a security vulnerability.