What is the CVSS score of CVE-2026-2086?

CVE-2026-2086 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of 810g Firmware are affected by CVE-2026-2086?

A critical buffer overflow vulnerability in UTT HiPER 810G firewall devices (versions up to 1.7.7-171114) allows unauthenticated attackers to execute arbitrary code through the management interface.

Is there a public PoC exploit available for CVE-2026-2086?

Yes, a public proof-of-concept exploit is available for CVE-2026-2086. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-2086?

Within 24 hours: Immediately inventory all UTT HiPER 810G devices and identify affected versions; restrict management interface access to trusted networks only via firewall rules. Within 7 days: Implement network segmentation to isolate affected devices from critical systems; enable enhanced logging and monitoring for management interface activity. Within 30 days: Contact UTT for patch availability and testing timeline; develop contingency plan to replace or retire devices if patch unavailable; deploy WAF rules to block malicious payloads targeting the /goform/formFireWall endpoint.

810g Firmware CVE-2026-2086

HIGH

Buffer Overflow (CWE-119)

2026-02-07 cna@vuldb.com

Buffer Overflow 810g Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Feb 24, 2026 - 20:05 vuln.today

Public exploit code

CVE Published

Feb 07, 2026 - 14:16 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was detected in UTT HiPER 810G up to 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formFireWall of the component Management Interface. The manipulation of the argument GroupName results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Remote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 allows authenticated attackers to achieve full system compromise via a buffer overflow in the Management Interface firewall configuration function. Public exploit code exists for this vulnerability, and no patch is available from the vendor despite early disclosure notification. The attack requires valid credentials but can be executed over the network without user interaction.

Technical ContextAI

Classified as CWE-119 (Buffer Overflow). Affects 810G Firmware. A vulnerability was detected in UTT HiPER 810G up to 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formFireWall of the component Management Interface. The manipulation of the argument GroupName results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible. Restrict network access to the affected service where possible.