CVE-2026-2066

CVE-2026-2066 affects UTT 进取 520W, version 1.7.7-180627. The flaw is a buffer overflow in strcpy in /goform/formIpGroupConfig when groupName is manipulated, remotely exploitable. Public exploit exists; vendor did not respond to disclosure. Several sources (NVD/Red Hat/CVE records) indicate high i...

CVE-2026-1140

The CVE-2026-1140 entry concerns UTT 进取 520W (version 1.7.7-180627). A buffer overflow arises in strcpy within /goform/ConfigExceptAli, enabling remote exploitation. Public exploit exists and attack surface is network-facing with low privileges required and no user interaction. Red Hat and other ...

CVE-2026-0841

The CVE-2026-0841 vulnerability affects UTT 进取 520W, specifically a buffer overflow in the strcpy usage of /goform/formPictureUrl triggered by the importpictureurl parameter. This allows remote exploitation and has public exploit availability. Multiple sources (Red Hat, NVD, CNVD, CIRCL, etc.) co...

CVE-2026-0838

CVE-2026-0838 affects the UTT 进取 520W router (firmware 1.7.7-180627). The flaw is a buffer overflow in the strcpy operation of /goform/ConfigWirelessBase when the ssid argument is manipulated, enabling remote exploitation over the network. The exploit has been publicly released and a confirmed re...

CVE-2026-0837

The CVE-2026-0837 entry concerns UTT 进取 520W, version 1.7.7-180627. The vulnerability lies in the strcpy usage within /goform/formFireWall, where manipulating the GroupName argument can trigger a buffer overflow. This vulnerability enables a remote attack, and public exploits are noted. Multiple ...

CVE-2026-2071

CVE-2026-2071 affects UTT 进取 520W, in the strcpy routine of /goform/formP2PLimitConfig. The vulnerability is triggered by manipulating the except argument, causing a buffer overflow and enabling remote exploitation. An exploit has been publicly released. The vendor was notified but did not respon...

CVE-2025-14141

The CVE-2025-14141 entry affects UTT Progress 520W (firmware around 1.7.7-180627). The vulnerability stems from the strcpy usage in /goform/formArpBindConfig, where improper validation of the pools argument can cause a buffer overflow. This condition potentially enables remote exploitation, and a...

CVE-2025-15462

CVE-2025-15462 affects UTT 进取 520W (version 1.7.7-180627). The vulnerability is a buffer overflow in the strcpy() handling of the timestart argument within /goform/ConfigAdvideo, enabling remote, unauthenticated impact as described. Public exploit disclosed; vendor contacted with no response. Con...

CVE-2026-0840

CVE-2026-0840 affects UTT 进取 520W version 1.7.7-180627. The vulnerable code is the strcpy call in /goform/formConfigNoticeConfig where tampering the timestart argument causes a buffer overflow. This enables remote exploitation and aligns with public exploit disclosures; multiple sources describe ...

CVE-2026-1138

Affects UTT 进取 520W in version 1.7.7-180627. The vulnerability is a buffer overflow in strcpy within /goform/ConfigExceptQQ, allowing remote manipulation. Exploit published; vendor contacted without response. No fixed version information is provided in the connected documents; monitor for updates...

CVE-2025-15459

The CVE-2025-15459 entry affects UTT 进取 520W, version 1.7.7-180627. The vulnerability is in strcpy used by /goform/formUser; improper handling of the passwd1 argument leads to a buffer overflow. It is a remote-exploit capable flaw with in-the-wild/publicly disclosed exploit information. Multiple ...

CVE-2026-1137

CVE-2026-1137 affects UTT 进取 520W version 1.7.7-180627. The issue is a buffer overflow in the C function strcpy of the file /goform/formWebAuthGlobalConfig. Manipulation can be performed remotely, and public exploits exist. Multiple sources confirm remote execution potential and high impact on co...

CVE-2026-0836

CVE-2026-0836 affects UTT 进取 520W router, version 1.7.7-180627. The vulnerability is a buffer overflow in strcpy on /goform/formConfigFastDirectionW triggered by the ssid argument, enabling remote exploitation. Public exploit disclosure is noted. Red Hat/CIRA and other feeds confirm details; PT S...

CVE-2026-2067

CVE-2026-2067 affects UTT 520W (version 1.7.7-180627). The flaw is a buffer overflow in the strcpy usage of /goform/formTimeGroupConfig’s handling of the year1 argument. This remote-facing condition can be triggered by manipulating input, with the exploit reportedly disclosed publicly. The CVSS d...

CVE-2025-14140

The CVE-2025-14140 entry concerns UTT Progress 520W (version 1.7.7-180627). The vulnerability is a buffer overflow in strcpy used by the /goform/websHostFilter handler, triggered by manipulating the addHostFilter parameter. This allows remote exploitation and an exploit is public. Connected sourc...

CVE-2025-15460

Summary of CVE-2025-15460 : A buffer overflow vulnerability exists in UTT 进取 520W firmware version 1.7.7-180627, caused by unsafe handling of the EncryptionMode argument in the function strcpy within the file /goform/formPptpClientConfig. The issue allows remote exploitation and is publicly avail...

CVE-2026-0839

CVE-2026-0839 affects UTT 进取 520W (firmware 1.7.7-180627). The vulnerability is a buffer overflow in the strcpy operation of the file /goform/APSecurity, exploitable via manipulation of the wepkey1 argument. Reported as exploitable from remote, with public exploit available. Affected component is...

CVE-2026-2070

UTT 进取 520W 1.7.7-180627 is affected by a buffer overflow in the strcpy usage inside /goform/formPolicyRouteConf, triggered by manipulating the GroupName argument. This remote vulnerability could lead to high impact on confidentiality, integrity, and availability as indicated by the CVSS metrics,...

CVE-2026-31065

The UTT Aggressive 520W wireless router (specifically version v3v1.7.7-180627 ) contains a buffer overflow vulnerability within the formConfigCliForEngineerOnly function. The flaw is triggered by the addCommand parameter, which fails to properly check the size of the input before copying it into ...

CVE-2025-14139

The CVE-2025-14139 issue affects UTT Progress 520W (version 1.7.7-180627): the vulnerable component is the strcpy operation in /goform/formConfigDnsFilterGlobal, where improper handling of the timeRangeName argument triggers a buffer overflow. Multiple connected sources confirm public exploitatio...

CVE-2026-2068

The CVE-2026-2068 entry concerns UTT 进取 520W (version 1.7.7-180627). The vulnerability stems from the strcpy usage in /goform/formSyslogConf where manipulating the ServerIp argument can cause a buffer overflow. It is exploitable remotely, and public PoC/exploits are noted across sources. Multiple...

CVE-2026-31062

The UTT Aggressive 520W wireless router (version v3v1.7.7-180627 ) is vulnerable to a buffer overflow within the formFtpServerDirConfig function. The root cause is the copying of buffers without validating the size of the input data, specifically within the filename parameter . A remote attacker ...

CVE-2026-1139

CVE-2026-1139 affects UTT 进取 520W software, specifically the strcpy usage in /goform/ConfigExceptMSN, causing a buffer overflow. The issue enables remote, unauthenticated exploitation via network, with a publicly disclosed exploit and no vendor response reported. Affected version is 1.7.7-180627....

CVE-2025-15461

CVE-2025-15461 affects UTT 进取 520W, version 1.7.7-180627. The vulnerability is in the function that uses strcpy in the file /goform/formTaskEdit, where manipulating the selDateType argument can trigger a buffer overflow. The attack can be executed remotely and an exploit has been published. Vendo...

CVE-2026-31059

CVE-2026-31059 affects UTT Aggressive HiPER 520W with software version v3v1.7.7-180627, where the /goform/formDia component is vulnerable to remote command execution. The root cause is not explicitly detailed in the provided documents, but an attacker can craft input to execute arbitrary commands...

CVE-2026-31067

The UTT Aggressive 520W wireless router (version v3v1.7.7-180627 ) is susceptible to a remote command execution (RCE) vulnerability in the /goform/formReleaseConnect component. This flaw arises from the improper neutralization of special elements used in an OS command, which allows an attacker to...