SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-78169

CRITICAL · CVSS 9.9 EPSS 0.44% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-24 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A stack-based buffer overflow vulnerability in the HTTP Request Handler of UTT HiPER 1250GW versions up to 3.2.7-210907-180535 allows remote attackers to manipulate the Profile argument, potentially leading to arbitrary code execution. Organizations using affected versions should prioritize immediate patching or mitigation measures, as the exploit is publicly available and poses a critical risk to system integrity and security.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-78169
Severity
CRITICAL
CVSS
9.9
EPSS
0.44%

Original NVD Description

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.