CVE-2026-1139

7.4 highEPSS 1.0%

High (7.4) in utt 520w firmware. EPSS 1.0% chance of exploitation in the next 30 days.

A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/ConfigExceptMSN. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

CVSS 4.0

7.4 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWEs: CWE-119, CWE-120
Published: 2026-01-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

utt:520w_firmware

References

https://github.com/cymiao1978/cve/blob/main/new/34.md
https://vuldb.com/?ctiid.341730
https://vuldb.com/?id.341730
https://vuldb.com/?submit.735299

Check your stack JSON