CVE-2026-2981

🗓️ 23 Feb 2026 09:02:07Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 23 Views🌐 WEB

CVE-2026-2981 affects UTT HiPER 810G up to 1.7.7-1711; strcpy in formTaskEdit_ap allows remote buffer overflow via txtMin2, with public exploit.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-2981	23 Feb 202609:02	–	attackerkb
BDU FSTEC	The vulnerability of the strcpy() function (/goform/formTaskEdit_ap) in the microprogrammed software for UTT HiPER 810G allows a hacker to cause a service failure.	22 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-2981	22 Feb 202616:34	–	circl
CNNVD	UTT HiPER 810G 安全漏洞	23 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-2981 UTT HiPER 810G formTaskEdit_ap strcpy buffer overflow	23 Feb 202609:02	–	cvelist
NVD	CVE-2026-2981	23 Feb 202609:17	–	nvd
OSV	CVE-2026-2981	23 Feb 202609:17	–	osv
Positive Technologies	PT-2026-21457	22 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-2981	24 Feb 202613:33	–	redhatcve
Vulnrichment	CVE-2026-2981 UTT HiPER 810G formTaskEdit_ap strcpy buffer overflow	23 Feb 202609:02	–	vulnrichment

NVD

Vulners

Node

utt 810g_firmwareRange≤1.7.7-171114

AND

utt 810gMatch3.0

[
  {
    "vendor": "UTT",
    "product": "HiPER 810G",
    "versions": [
      {
        "version": "1.7.7-1711",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/7wkajk/CVE-VUL/blob/main/5.md
vuldb	www.vuldb.com/
github	www.github.com/7wkajk/CVE-VUL/blob/main/5.md
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
txtMin2	request body	/goform/formTaskEdit_ap	Buffer overflow in strcpy handling of txtMin2 in /goform/formTaskEdit_ap may allow remote attacker to execute arbitrary code.	CWE-119, CWE-120

17 Jun 2026 10:32Current

8.5High risk

Vulners AI Score8.5

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00677

SSVC