{"id":"CVE-2026-2086","state":"PUBLISHED","title":"UTT HiPER 810G Management formFireWall strcpy buffer overflow","description":"A vulnerability was detected in UTT HiPER 810G up to 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formFireWall of the component Management Interface. The manipulation of the argument GroupName results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2026-02-07T13:32:06.896Z","updatedAt":"2026-02-23T09:32:13.444Z","severity":{"score":8.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["UTT HiPER 810G"],"affected":[{"vendor":"UTT","product":"HiPER 810G","versions":[{"version":"1.7.7-171114","status":"affected"}],"modules":["Management Interface"]}],"references":["https://vuldb.com/?id.344653","https://vuldb.com/?ctiid.344653","https://vuldb.com/?submit.746502","https://github.com/alc9700jmo/CVE/issues/22","https://github.com/alc9700jmo/CVE/issues/22#issue-3851242657"],"weaknesses":["CWE-120","CWE-119"],"ingestedAt":"2026-10-29T20:11:31.369Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/2xxx/CVE-2026-2086.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-2086","state":"PUBLISHED","datePublished":"2026-02-07T13:32:06.896Z","dateUpdated":"2026-02-23T09:32:13.444Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-02-06T08:22:33.810Z"},"containers":{"cna":{"title":"UTT HiPER 810G Management formFireWall strcpy buffer overflow","descriptions":[{"lang":"en","value":"A vulnerability was detected in UTT HiPER 810G up to 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formFireWall of the component Management Interface. The manipulation of the argument GroupName results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"UTT","product":"HiPER 810G","versions":[{"version":"1.7.7-171114","status":"affected"}],"modules":["Management Interface"]}],"references":[{"url":"https://vuldb.com/?id.344653","name":"VDB-344653 | UTT HiPER 810G Management formFireWall strcpy buffer overflow","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.344653","name":"VDB-344653 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.746502","name":"Submit #746502 | UTT (AiTai) HiPER 810G <= v3v1.7.7-171114 Buffer Overflow","tags":["third-party-advisory"]},{"url":"https://github.com/alc9700jmo/CVE/issues/22","tags":["issue-tracking"]},{"url":"https://github.com/alc9700jmo/CVE/issues/22#issue-3851242657","tags":["exploit","issue-tracking"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.7,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","baseSeverity":"HIGH"}},{"cvssV3_1":{"version":"3.1","baseScore":8.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":8.8,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":9,"vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","type":"CWE","lang":"en","description":"Buffer Overflow"}]},{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"Memory Corruption"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-02-23T09:32:13.444Z"},"timeline":[{"time":"2026-02-06T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-02-06T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-02-08T10:23:09.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"alc9700 (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-10T15:46:40.742930Z","id":"CVE-2026-2086","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-10T15:47:06.720Z"}}]}}}