CVE-2026-1140CWE-119CWE-120

UTT 进取 520W ConfigExceptAli strcpy buffer overflow

High · published January 19, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

⚡ A buffer overflow vulnerability in UTT 进取 520W could let a remote attacker take control with just the right input! Think of it like a chef who mistakenly overfills a pot, causing the ingredients to spill over and mess up the entire kitchen. In this case, the overflow can let the attacker execute their own code, leading to a full takeover! If exploited, an attacker could gain unauthorized access and potentially execute arbitrary commands on the system. This could lead to devastating consequences, including data theft or complete system compromise, leaving your defenses in ruins!

Put simply

Think of it like a chef who mistakenly overfills a pot, causing the ingredients to spill over and mess up the entire kitchen. In this case, the overflow can let the attacker execute their own code, leading to a full takeover! This vulnerability occurs in the 'strcpy' function within the '/goform/ConfigExceptAli' file, allowing an attacker to exploit a buffer overflow and execute malicious code remotely.

What to do

If exploited, an attacker could gain unauthorized access and potentially execute arbitrary commands on the system. This could lead to devastating consequences, including data theft or complete system compromise, leaving your defenses in ruins! Promptly patch to the latest version of UTT 进取, as it's crucial to protect against this vulnerability. Additionally, ensure that proper input validation measures are implemented to prevent future occurrences! You've got this! Keep your systems secure and updated, and you'll conquer this challenge in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00772 · 55.2th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-19T05:32Z
EPSS history
Timeline
  • 19 JAN 05:32Z
    UTT 进取 520W ConfigExceptAli strcpy buffer overflow
    cvelistv5