CVE-2026-2847

The CVE-2026-2847 affects UTT HiPER 520 (product/version: 1.7.7-160105) within the Web Management Interface. The vulnerability is in the sub_44EFB4 function of /goform/formReleaseConnect, where manipulating the Isp_Name argument allows OS command injection. The issue enables remote exploitation, ...

CVE-2026-2846

UTT HiPER 520 1.7.7-160105 Web Management Interface contains a vulnerability in the sub_44D264 function of /goform/formPdbUpConfig. By manipulating the policyNames argument, an attacker can trigger os command injection remotely. Affects the Web Management Interface component; CVSS data indicate h...