Vulnerability · Published Apr 13, 2026 · Assigned by VulDB
CVE-2026-6186UTT HiPER 1200GW formNatStaticMap strcpy buffer overflow
High 8.8
In plain English
A high-severity buffer overflow in HiPER 1200GW from UTT. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.6%top 50.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This vulnerability affects the function strcpy of the file /goform/formNatStaticMap. The manipulation of the argument NatBind leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| UTT | HiPER 1200GW | 2.5.3-170306 |
Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-357108 | UTT HiPER 1200GW formNatStaticMap strcpy buffer overflow vdb-entry, technical-description
- VDB-357108 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #797304 | UTT HiPER 1200GW <=v2.5.3-170306 Buffer Overflow third-party-advisory
- https://github.com/lin-3-start/lin-cve/blob/main/Amao/1.md exploit