CVE-2026-1137CWE-119CWE-120

UTT 进取 520W formWebAuthGlobalConfig strcpy buffer overflow

High · published January 19, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
62.3
In the wild
Unconfirmed
What it is

⚡ A delightful little buffer overflow lurks in UTT 进取 520W 1.7.7-180627, just waiting for some remote mischief! Think of it as a waiter who's overflowing your soup bowl—one small mistake turns a nice dinner into a messy disaster. In this case, a careless handling of data could spill sensitive information or even worse. An attacker could exploit this vulnerability to execute arbitrary code, potentially allowing them to take control of the device. Given that this attack can happen remotely, the consequences could be absolutely devastating—imagine a hacker manipulating everything from your network settings to sensitive data. Your systems could be at risk while you’re unaware!

Put simply

Think of it as a waiter who's overflowing your soup bowl—one small mistake turns a nice dinner into a messy disaster. In this case, a careless handling of data could spill sensitive information or even worse. This vulnerability in the strcpy function of the /goform/formWebAuthGlobalConfig file allows attackers to perform a buffer overflow, which can lead to remote code execution if manipulated correctly.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, potentially allowing them to take control of the device. Given that this attack can happen remotely, the consequences could be absolutely devastating—imagine a hacker manipulating everything from your network settings to sensitive data. Your systems could be at risk while you’re unaware! It's crucial to patch the UTT 进取 520W to the latest version as soon as possible. Additionally, consider implementing stricter input validation to prevent future buffer overflow issues. Always keep your software updated to protect against newly discovered vulnerabilities! You've got this! Stay vigilant, follow these steps, and you'll have your systems secured in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00995 · 62.3th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-19T04:02Z
EPSS history
Timeline
  • 19 JAN 04:02Z
    UTT 进取 520W formWebAuthGlobalConfig strcpy buffer overflow
    cvelistv5