Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.6

CVE-2026-76003: UTT HiPER 1200GW allows remote code execution through input manipulation.

CVE-2026-76003 · published 16 days ago
Summary

A security issue exists in UTT HiPER 1200GW, specifically in the way it handles certain input. This can allow an attacker to remotely execute malicious code on the device. Users should update to a fixed version to prevent exploitation.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
utt hiper 1200gw 2.5.3-170306
Original advisory text
UTT HiPER 1200GW formGroupConfig strcpy stack-based overflow
A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formGroupConfig. Executing a manipulation of the argument timestart can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Severity
8.6 High
CVSS 2.0: 9.0 (NVD)
CVSS 3.1: 9.9 (NVD)
CVSS 4.0: 8.6 (NVD)
Exploitation
EPSS <1%
Type
CWE-119Buffer Overflow
CWE-121Stack-based Buffer Overflow
Timeline
Published19 Aug 2026
Updated3 Sep 2026
First seen19 Aug 2026
Sources
CVE-2026-76003 · MITRE
Monitor software like this
Free during beta