AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-19341

HIGH · CVSS 8.8 EPSS 0.44% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-09 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

A stack-based buffer overflow vulnerability exists in the strcpy function of the /goform/pptpSrvGlobalConfig file in UTT HiPER 1200GW versions up to 2.5.3-170306, allowing remote attackers to manipulate the EncryptionMode argument. This high-severity flaw (CVSS 8.8) could lead to arbitrary code execution or denial of service. Organizations using affected versions should prioritize immediate remediation due to the public disclosure of the exploit and the lack of vendor response.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-19341
Severity
HIGH
CVSS
8.8
EPSS
0.44%

Original NVD Description

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.