CVE-2026-1140

The CVE-2026-1140 entry concerns UTT 进取 520W (version 1.7.7-180627). A buffer overflow arises in strcpy within /goform/ConfigExceptAli, enabling remote exploitation. Public exploit exists and attack surface is network-facing with low privileges required and no user interaction. Red Hat and other ...

CVE-2026-0838

CVE-2026-0838 affects the UTT 进取 520W router (firmware 1.7.7-180627). The flaw is a buffer overflow in the strcpy operation of /goform/ConfigWirelessBase when the ssid argument is manipulated, enabling remote exploitation over the network. The exploit has been publicly released and a confirmed re...

CVE-2026-0841

The CVE-2026-0841 vulnerability affects UTT 进取 520W, specifically a buffer overflow in the strcpy usage of /goform/formPictureUrl triggered by the importpictureurl parameter. This allows remote exploitation and has public exploit availability. Multiple sources (Red Hat, NVD, CNVD, CIRCL, etc.) co...

CVE-2026-2066

CVE-2026-2066 affects UTT 进取 520W, version 1.7.7-180627. The flaw is a buffer overflow in strcpy in /goform/formIpGroupConfig when groupName is manipulated, remotely exploitable. Public exploit exists; vendor did not respond to disclosure. Several sources (NVD/Red Hat/CVE records) indicate high i...

CVE-2026-0837

The CVE-2026-0837 entry concerns UTT 进取 520W, version 1.7.7-180627. The vulnerability lies in the strcpy usage within /goform/formFireWall, where manipulating the GroupName argument can trigger a buffer overflow. This vulnerability enables a remote attack, and public exploits are noted. Multiple ...

CVE-2025-14141

The CVE-2025-14141 entry affects UTT Progress 520W (firmware around 1.7.7-180627). The vulnerability stems from the strcpy usage in /goform/formArpBindConfig, where improper validation of the pools argument can cause a buffer overflow. This condition potentially enables remote exploitation, and a...

CVE-2026-1137

CVE-2026-1137 affects UTT 进取 520W version 1.7.7-180627. The issue is a buffer overflow in the C function strcpy of the file /goform/formWebAuthGlobalConfig. Manipulation can be performed remotely, and public exploits exist. Multiple sources confirm remote execution potential and high impact on co...

CVE-2025-15462

CVE-2025-15462 affects UTT 进取 520W (version 1.7.7-180627). The vulnerability is a buffer overflow in the strcpy() handling of the timestart argument within /goform/ConfigAdvideo, enabling remote, unauthenticated impact as described. Public exploit disclosed; vendor contacted with no response. Con...

CVE-2026-1138

Affects UTT 进取 520W in version 1.7.7-180627. The vulnerability is a buffer overflow in strcpy within /goform/ConfigExceptQQ, allowing remote manipulation. Exploit published; vendor contacted without response. No fixed version information is provided in the connected documents; monitor for updates...

CVE-2026-0836

CVE-2026-0836 affects UTT 进取 520W router, version 1.7.7-180627. The vulnerability is a buffer overflow in strcpy on /goform/formConfigFastDirectionW triggered by the ssid argument, enabling remote exploitation. Public exploit disclosure is noted. Red Hat/CIRA and other feeds confirm details; PT S...

CVE-2026-0840

CVE-2026-0840 affects UTT 进取 520W version 1.7.7-180627. The vulnerable code is the strcpy call in /goform/formConfigNoticeConfig where tampering the timestart argument causes a buffer overflow. This enables remote exploitation and aligns with public exploit disclosures; multiple sources describe ...

CVE-2025-15459

The CVE-2025-15459 entry affects UTT 进取 520W, version 1.7.7-180627. The vulnerability is in strcpy used by /goform/formUser; improper handling of the passwd1 argument leads to a buffer overflow. It is a remote-exploit capable flaw with in-the-wild/publicly disclosed exploit information. Multiple ...

CVE-2026-2067

CVE-2026-2067 affects UTT 520W (version 1.7.7-180627). The flaw is a buffer overflow in the strcpy usage of /goform/formTimeGroupConfig’s handling of the year1 argument. This remote-facing condition can be triggered by manipulating input, with the exploit reportedly disclosed publicly. The CVSS d...

CVE-2026-2071

CVE-2026-2071 affects UTT 进取 520W, in the strcpy routine of /goform/formP2PLimitConfig. The vulnerability is triggered by manipulating the except argument, causing a buffer overflow and enabling remote exploitation. An exploit has been publicly released. The vendor was notified but did not respon...

CVE-2025-15460

Summary of CVE-2025-15460 : A buffer overflow vulnerability exists in UTT 进取 520W firmware version 1.7.7-180627, caused by unsafe handling of the EncryptionMode argument in the function strcpy within the file /goform/formPptpClientConfig. The issue allows remote exploitation and is publicly avail...

CVE-2026-0839

CVE-2026-0839 affects UTT 进取 520W (firmware 1.7.7-180627). The vulnerability is a buffer overflow in the strcpy operation of the file /goform/APSecurity, exploitable via manipulation of the wepkey1 argument. Reported as exploitable from remote, with public exploit available. Affected component is...

CVE-2026-31065

CVE-2026-31065 affects UTT Aggressive 520W, v3v1.7.7-180627. A buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function is described, enabling a crafted input to cause a Denial of Service (DoS). No further exploit details or patch/version remediation are provided i...

CVE-2026-2070

UTT 进取 520W 1.7.7-180627 is affected by a buffer overflow in the strcpy usage inside /goform/formPolicyRouteConf, triggered by manipulating the GroupName argument. This remote vulnerability could lead to high impact on confidentiality, integrity, and availability as indicated by the CVSS metrics,...

CVE-2026-31062

CVE-2026-31062 affects UTT Aggressive 520W devices with firmware v3v1.7.7-180627. The issue is a buffer overflow in the filename parameter of the formFtpServerDirConfig function, leading to Denial of Service via crafted input. The connected sources consistently describe this as a DoS vulnerabilit...

CVE-2025-14140

The CVE-2025-14140 entry concerns UTT Progress 520W (version 1.7.7-180627). The vulnerability is a buffer overflow in strcpy used by the /goform/websHostFilter handler, triggered by manipulating the addHostFilter parameter. This allows remote exploitation and an exploit is public. Connected sourc...

CVE-2026-1139

CVE-2026-1139 affects UTT 进取 520W software, specifically the strcpy usage in /goform/ConfigExceptMSN, causing a buffer overflow. The issue enables remote, unauthenticated exploitation via network, with a publicly disclosed exploit and no vendor response reported. Affected version is 1.7.7-180627....

CVE-2025-14139

The CVE-2025-14139 issue affects UTT Progress 520W (version 1.7.7-180627): the vulnerable component is the strcpy operation in /goform/formConfigDnsFilterGlobal, where improper handling of the timeRangeName argument triggers a buffer overflow. Multiple connected sources confirm public exploitatio...

CVE-2025-15461

CVE-2025-15461 affects UTT 进取 520W, version 1.7.7-180627. The vulnerability is in the function that uses strcpy in the file /goform/formTaskEdit, where manipulating the selDateType argument can trigger a buffer overflow. The attack can be executed remotely and an exploit has been published. Vendo...

CVE-2026-2068

The CVE-2026-2068 entry concerns UTT 进取 520W (version 1.7.7-180627). The vulnerability stems from the strcpy usage in /goform/formSyslogConf where manipulating the ServerIp argument can cause a buffer overflow. It is exploitable remotely, and public PoC/exploits are noted across sources. Multiple...

CVE-2026-31059

CVE-2026-31059 affects UTT Aggressive HiPER 520W with software version v3v1.7.7-180627, where the /goform/formDia component is vulnerable to remote command execution. The root cause is not explicitly detailed in the provided documents, but an attacker can craft input to execute arbitrary commands...

CVE-2026-31067

CVE-2026-31067 describes a remote command execution in the /goform/formReleaseConnect component of UTT Aggressive 520W, affected in v3v1.7.7-180627. An attacker can execute arbitrary commands by sending a crafted string. Documented across multiple sources (NVD, Red Hat, EUVD/ENISA, CVE List, etc....