Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.6
CVE-2026-76004: UTT HiPER 1250GW allows remote code execution
CVE-2026-76004 · published 16 days ago
Summary
A security flaw in the UTT HiPER 1250GW's web interface allows attackers to remotely execute malicious code. This could lead to unauthorized access or disruption of the device. Update the device to the latest version to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| utt | hiper 1250gw | 3.2.7-210907-180535 |
Original advisory text
A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the compo...
A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argument pvid leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
References
- https://vuldb.com/vuln/391920 vdb-entry technical-description
- https://vuldb.com/vuln/391920/cti signature permissions-required
- https://vuldb.com/cve/CVE-2026-76004 third-party-advisory
- https://vuldb.com/submit/877885 third-party-advisory
- https://github.com/7wkajk/CVE-VUL/blob/main/106.md exploit
Severity
8.6
High
CVSS 3.1: 9.9 (MITRE)
Exploitation
EPSS <1%
Type
CWE-121Stack-based Buffer Overflow
CWE-119Buffer Overflow
Timeline
Published19 Aug 2026
Updated3 Sep 2026
First seen19 Aug 2026
Monitor software like this
Free during beta