Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-2847

UTT HiPER 520 Web Management formReleaseConnect sub_44EFB4 os command injection

A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub_44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. The manipulation of the argument Isp_Name results in os command injection. The attack can be launched remotely. The exploit is now public and may be used.

CVSS 4.0 · 8.6 High EPSS 10.5% KEV · Not listed
Vendors
Utt
Products
520 520 Firmware Hiper 520
CVE-2026-2846

UTT HiPER 520 Web Management formPdbUpConfig sub_44D264 os command injection

A security vulnerability has been detected in UTT HiPER 520 1.7.7-160105. This impacts the function sub_44D264 of the file /goform/formPdbUpConfig of the component Web Management Interface. The manipulation of the argument policyNames leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

CVSS 4.0 · 8.6 High EPSS 11.0% KEV · Not listed
Vendors
Utt
Products
520 520 Firmware Hiper 520
CVE-2026-31059

Remote Command Execution via /goform/formDia in UTT Aggressive HiPER 520W

A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Utt
Products
520w 520w Firmware Hiper 520w