Vulnerability · Published Feb 7, 2026 · Assigned by VulDB

CVE-2026-2086UTT HiPER 810G Management formFireWall strcpy buffer overflow

High 8.8

In plain English

A high-severity buffer overflow in HiPER 810G from UTT. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.7%top 45.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in UTT HiPER 810G up to 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formFireWall of the component Management Interface. The manipulation of the argument GroupName results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
UTT	HiPER 810G	1.7.7-171114

Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-344653 | UTT HiPER 810G Management formFireWall strcpy buffer overflow vdb-entry, technical-description
VDB-344653 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #746502 | UTT (AiTai) HiPER 810G <= v3v1.7.7-171114 Buffer Overflow third-party-advisory
https://github.com/alc9700jmo/CVE/issues/22 issue-tracking
https://github.com/alc9700jmo/CVE/issues/22#issue-3851242657 exploit, issue-tracking