What is the CVSS score of CVE-2026-2935?

CVE-2026-2935 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of 810g Firmware are affected by CVE-2026-2935?

A buffer overflow vulnerability in UTT HiPER 810G devices (versions up to 1.7.7-171114) allows unauthenticated remote code execution through a configuration endpoint.

Is there a public PoC exploit available for CVE-2026-2935?

Yes, a public proof-of-concept exploit is available for CVE-2026-2935. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-2935?

Within 24 hours: inventory all UTT HiPER 810G devices and isolate affected systems from critical networks if possible. Within 7 days: implement network-level access controls restricting access to /goform/ConfigExceptMSN endpoint and deploy WAF rules blocking malicious payloads to this URI. Within 30 days: contact UTT for patch timeline, evaluate replacement options, or implement complete network segmentation for affected devices with enhanced monitoring.

810g Firmware CVE-2026-2935

HIGH

Buffer Overflow (CWE-119)

2026-02-22 cna@vuldb.com

Buffer Overflow 810g Firmware

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:04 vuln.today

PoC Detected

Feb 24, 2026 - 17:17 vuln.today

Public exploit code

CVE Published

Feb 22, 2026 - 09:16 nvd

HIGH 7.2

DescriptionCVE.org

A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/ConfigExceptMSN. Executing a manipulation of the argument remark can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

AnalysisAI

Remote code execution in UTT HiPER 810G firmware through version 1.7.7-171114 allows unauthenticated attackers to overflow a buffer via the remark parameter in the /goform/ConfigExceptMSN endpoint. Public exploit code is available and no patch has been released, creating immediate risk for exposed devices.

Technical ContextAI

Classified as CWE-119 (Buffer Overflow). Affects 810G Firmware. A weakness has been identified in UTT HiPER 810G up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/ConfigExceptMSN. Executing a manipulation of the argument remark can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible. Restrict network access to the affected service where possible.