CVE-2026-0840

🗓️ 11 Jan 2026 06:32:06Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 8 Views🌐 WEB

CVE-2026-0840: UTT 进取 520W 1.7.7-180627 strcpy overflow in formConfigNoticeConfig timestart enables remote exploit.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2026-0840	11 Jan 202607:26	–	circl
CNNVD	UTT 520W 安全漏洞	11 Jan 202600:00	–	cnnvd
Cvelist	CVE-2026-0840 UTT 进取 520W formConfigNoticeConfig strcpy buffer overflow	11 Jan 202606:32	–	cvelist
EUVD	EUVD-2026-1903	11 Jan 202606:32	–	euvd
NVD	CVE-2026-0840	11 Jan 202607:15	–	nvd
Positive Technologies	PT-2026-2036	11 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-0840	13 Jan 202622:52	–	redhatcve
Vulnrichment	CVE-2026-0840 UTT 进取 520W formConfigNoticeConfig strcpy buffer overflow	11 Jan 202606:32	–	vulnrichment

NVD

Vulners

Node

utt 520w_firmwareRange≤1.7.7-180627

AND

utt 520wMatch3.0

[
  {
    "vendor": "UTT",
    "product": "进取 520W",
    "versions": [
      {
        "version": "1.7.7-180627",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/GUOTINGTING2297/cve/blob/main/1234/30.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
timestart	request body	/goform/formConfigNoticeConfig	Buffer overflow via manipulation of timestart in strcpy during /goform/formConfigNoticeConfig usage; remote/exploit available.	CWE-119, CWE-120

23 Feb 2026 08:30Current

6.7Medium risk

Vulners AI Score6.7

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00059

SSVC