SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-76004

CRITICAL · CVSS 9.9 EPSS 0.44% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-19 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A critical vulnerability exists in the UTT HiPER 1250GW, specifically in the HTTP Handler's strcpy function, which is susceptible to a stack-based buffer overflow due to improper handling of the pvid argument. This flaw allows remote attackers to exploit the device, potentially leading to unauthorized access or system compromise. Organizations using affected versions (up to 3.2.7-210907-180535) should prioritize immediate remediation to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-76004
Severity
CRITICAL
CVSS
9.9
EPSS
0.44%

Original NVD Description

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argument pvid leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.