Vulnerability · Published Feb 22, 2026 · Assigned by VulDB
CVE-2026-2935UTT HiPER 810G ConfigExceptMSN strcpy buffer overflow
High 7.2
In plain English
A high-severity buffer overflow in HiPER 810G from UTT. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).
Severity (CVSS 3.1)7.2High
Exploit odds (30 days)0.9%top 39.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/ConfigExceptMSN. Executing a manipulation of the argument remark can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| UTT | HiPER 810G | 1.7.7-171114 |
Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-347297 | UTT HiPER 810G ConfigExceptMSN strcpy buffer overflow vdb-entry, technical-description
- VDB-347297 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #755297 | UTT (AiTai) HiPER 810G ≤ v3v1.7.7-171114 Buffer Overflow third-party-advisory
- https://github.com/alc9700jmo/CVE/issues/23 exploit, issue-tracking