CVE-2026-0840CWE-119CWE-120

UTT 进取 520W formConfigNoticeConfig strcpy buffer overflow

High · published January 11, 2026

CVSS v4.0
8.7
EPSS
4%
Percentile
90.7
In the wild
Unconfirmed
What it is

⚡ A buffer overflow vulnerability is lurking in UTT 进取 520W 1.7.7-180627! By manipulating a parameter, an attacker could craft a payload that leads to serious mischief remotely. 🔥 Think of it as a crowded elevator that can only hold a certain number of people. If too many try to squeeze in, it could overflow and cause a jam, potentially damaging the elevator and anyone inside. If exploited, an attacker could potentially execute arbitrary code, leading to unauthorized access, data manipulation, or even complete system compromise. This isn't just a nuisance; it could lead to absolute chaos, as your device might start doing things you never intended!

Put simply

Think of it as a crowded elevator that can only hold a certain number of people. If too many try to squeeze in, it could overflow and cause a jam, potentially damaging the elevator and anyone inside. This vulnerability allows remote attackers to exploit the strcpy function in the /goform/formConfigNoticeConfig file, leading to a buffer overflow when the timestart argument is manipulated.

What to do

If exploited, an attacker could potentially execute arbitrary code, leading to unauthorized access, data manipulation, or even complete system compromise. This isn't just a nuisance; it could lead to absolute chaos, as your device might start doing things you never intended! Immediate action is crucial! Update to the fixed version as soon as it is released, and consider blocking access to the vulnerable endpoint until that patch is available. Monitoring logs for suspicious activity is also a good idea. You've got this! Stay vigilant, and once you take these steps, you'll be well on your way to keeping your system secure! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.04085 · 90.7th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-11T06:32Z
EPSS history
Timeline
  • 11 JAN 06:32Z
    UTT 进取 520W formConfigNoticeConfig strcpy buffer overflow
    cvelistv5