What is the CVSS score of CVE-2026-2904?

CVE-2026-2904 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of 810g Firmware are affected by CVE-2026-2904?

A critical buffer overflow vulnerability (CVE-2026-2904) affects UTT HiPER 810G devices, allowing remote attackers to execute arbitrary code with an 8.8 CVSS severity rating.

Is there a public PoC exploit available for CVE-2026-2904?

Yes, a public proof-of-concept exploit is available for CVE-2026-2904. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-2904?

Within 24 hours: Inventory all UTT HiPER 810G 1.7.7-171114 devices and assess network exposure; implement network segmentation to restrict access to affected devices. Within 7 days: Deploy WAF rules blocking requests to /goform/ConfigExceptAli endpoint; disable the ConfigExceptAli function if operationally feasible; establish continuous monitoring for exploitation attempts. Within 30 days: Contact UTT for patch availability and timeline; evaluate replacement with patched firmware versions or alternative equipment; conduct forensic analysis if any suspicious access logs are identified.

810g Firmware CVE-2026-2904

HIGH

Buffer Overflow (CWE-119)

2026-02-22 cna@vuldb.com

Buffer Overflow 810g Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:04 vuln.today

PoC Detected

Feb 24, 2026 - 17:49 vuln.today

Public exploit code

CVE Published

Feb 22, 2026 - 01:16 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was determined in UTT HiPER 810G 1.7.7-171114. This affects the function strcpy of the file /goform/ConfigExceptAli. Executing a manipulation can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

AnalysisAI

Unauthenticated remote attackers can achieve complete system compromise through a buffer overflow in the UTT HiPER 810G firmware's /goform/ConfigExceptAli endpoint via unsafe string handling. Public exploit code is available for this vulnerability, increasing exploitation risk for unpatched devices. The flaw requires only network access and affects firmware version 1.7.7-171114 with no patch currently available.

Technical ContextAI

Classified as CWE-119 (Buffer Overflow). Affects 810G Firmware. A vulnerability was determined in UTT HiPER 810G 1.7.7-171114. This affects the function strcpy of the file /goform/ConfigExceptAli. Executing a manipulation can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible. Restrict network access to the affected service where possible.