What is the CVSS score of CVE-2026-52187?

CVE-2026-52187 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of UTT nv518G are affected by CVE-2026-52187?

A remotely triggerable denial-of-service vulnerability in UTT nv518G routers (firmware nv518GV3v3.2.7-210919-161313) allows any unauthenticated attacker to crash the device without credentials,…

How to fix or mitigate CVE-2026-52187?

Within 24 hours, inventory all UTT nv518G routers running firmware nv518GV3v3.2.7 or earlier and isolate them from untrusted networks, restricting web-management access to a controlled administrative subnet via firewall rules. Within 7 days, implement network segmentation to limit direct internet exposure to the router's management interface, and configure intrusion detection rules to alert on suspicious connections to port 80/443 targeting the affected device. Within 30 days, actively monitor UTT vendor advisories for a patch release; if no patch is released within 60 days, evaluate replacement with a supported router model and establish a firmware update process to prevent future unfixed vulnerabilities.

UTT nv518G CVE-2026-52187

HIGH

Classic Buffer Overflow (CWE-120)

2026-07-02 mitre

Buffer Overflow Denial Of Service N A

7.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

7.5 HIGH

Unauthenticated network-reachable management handler (AV:N/AC:L/PR:N/UI:N) with an availability-only DoS crash, so C:N/I:N/A:H and no scope change.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 18:38 vuln.today

CVE Published

Jul 02, 2026 - 00:00 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 02, 2026 - 00:00 cve.org

HIGH 7.5

DescriptionCVE.org

Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_483ba0 component

AnalysisAI

Denial of service in the UTT nv518G router (firmware nv518GV3v3.2.7-210919-161313) allows remote attackers to crash the device by sending crafted input to the gohead/sub_483ba0 web-management component, triggering a classic buffer overflow (CWE-120). The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/A:H) indicates unauthenticated network reachability with availability-only impact, and publicly available exploit code exists via a GitHub write-up. There is no evidence of confidentiality or integrity impact, and EPSS remains low at 0.24%.

Technical ContextAI

The affected component is 'gohead', which corresponds to the embedded GoAhead-style HTTP web server that UTT SOHO/enterprise routers use for their management interface. The vulnerable function is identified by its reverse-engineered address sub_483ba0 (FUN_00483ba0), indicating the finding came from static/binary analysis of the firmware rather than source review. The root cause is CWE-120 (Buffer Copy without Checking Size of Input, 'Classic Buffer Overflow'): the handler copies attacker-controlled request data into a fixed-size stack or heap buffer without bounds validation, corrupting adjacent memory. On these resource-constrained MIPS/ARM embedded devices such corruption typically manifests as a service crash/reboot. CPE data is uninformative here (cpe:2.3:a:n/a:n/a:*), so the exact affected product must be taken from the description: UTT nv518G at the single listed firmware build.

RemediationAI

No vendor-released patch version is identified at time of analysis; the references point to UTT's Chinese-language download center (https://utt.com.cn/downloadcenter.php?filetypeid=3&model=518G&lang=zhcn) and a third-party GitHub report, not to a tagged fixed firmware build - check the download center for a firmware release newer than nv518GV3v3.2.7-210919-161313 and apply it if published. Until a fixed build is confirmed, the highest-value compensating control is to remove the router's web-management interface from untrusted networks: disable remote/WAN-side management entirely (side effect: administrators must be on the LAN or VPN to manage the device), and restrict the management HTTP(S) port via ACL to a specific trusted admin host or subnet (side effect: mis-scoped ACLs can lock out legitimate admins). If remote management must remain, place it behind a VPN and monitor for unexpected device reboots as a crash indicator. Because impact is availability-only, these access restrictions substantially reduce exposure without needing to disable core routing functionality.