CVE-2026-11517

7.4 highEPSS 0.6%

High (7.4). EPSS 0.6% chance of exploitation in the next 30 days.

A vulnerability was determined in UTT HiPER 2610G up to 3.0.0-171107. This impacts the function strcpy of the file /goform/formConfigDnsFilterGlobal. Executing a manipulation of the argument GroupName can lead to buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

Severity

CVSS 4.0

7.4 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWEs: CWE-119, CWE-120
Published: 2026-06-08
Modified: 2026-07-23
Record from: the NVD, synced 2026-10-19

References

https://github.com/HungryGoogle/log_attack/tree/main/index3
https://vuldb.com/cve/CVE-2026-11517
https://vuldb.com/submit/836278
https://vuldb.com/vuln/369137
https://vuldb.com/vuln/369137/cti

Check your stack JSON