Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-52186: UTT nv518G Software Arbitrary Code Execution

CVE-2026-52186

Summary

A security issue in UTT nv518G software allows an attacker to run unauthorized code on the system. This can happen if an attacker sends malicious input to the software, potentially leading to system compromise. Users should update to the latest version of the software to fix this issue.

Original title

SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to execute arbitrary code via the gohead/sub_463bbc component

Original description

SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to execute arbitrary code via the gohead/sub_463bbc component

Vulnerability type

CWE-89 SQL Injection

https://github.com/akuma-QAQ/CVEreport/blob/main/518G/FUN_00463bbc/README.md
https://utt.com.cn/downloadcenter.php?filetypeid=3&model=518G&lang=zhcn

Published: 1 Jul 2026 · Updated: 23 Jul 2026 · First seen: 1 Jul 2026