What is the CVSS score of CVE-2026-52192?

CVE-2026-52192 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of UTT nv518G are affected by CVE-2026-52192?

The UTT nv518G security gateway contains an unpatched denial-of-service vulnerability allowing remote, unauthenticated attackers to crash the device.

How to fix or mitigate CVE-2026-52192?

24 hours: Restrict network access to the GoAhead web management interface (port-level) to authorized administrative networks only. 7 days: Deploy network-level rate limiting and DoS protection upstream of affected gateways; configure resource monitoring and alerting on CPU/memory exhaustion. 30 days: Contact UTT for patch availability timeline on firmware nv518GV3 v3.2.7; evaluate replacement appliances if patch commitment is not provided.

UTT nv518G CVE-2026-52192

HIGH

Uncontrolled Resource Consumption (CWE-400)

2026-07-02 mitre

Denial Of Service N A

7.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

7.5 HIGH

Network-reachable web daemon, no auth or interaction (AV:N/AC:L/PR:N/UI:N); uncontrolled consumption crashes the service so A:H only, with C:N/I:N as impact is availability-only.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 06, 2026 - 16:28 vuln.today

CVSS changed

Jul 06, 2026 - 16:22 NVD

7.5 (HIGH)

CVE Published

Jul 02, 2026 - 00:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_445C5C component

AnalysisAI

Denial of service in the UTT nv518G security gateway (firmware nv518GV3 v3.2.7-210919-210919/161313) lets a remote, unauthenticated attacker crash or hang the device by triggering uncontrolled resource consumption in the gohead/sub_445C5C (FUN_00445c5c) handler of the built-in GoAhead-style web management daemon. No public exploit is identified in the source data, though a GitHub technical write-up reverse-engineering the vulnerable function is available; EPSS is low (0.20%, 10th percentile) and the CVE is not on CISA KEV, so exploitation is theoretical rather than confirmed. Impact is limited to availability (network outage of the gateway) with no confidentiality or integrity loss.

Technical ContextAI

UTT (上海艾泰科技 / UTT Technologies) nv518G is a Chinese-market SMB/enterprise network security gateway and router. The vulnerable component 'gohead' is the device's embedded HTTP management server (a GoAhead-derived web server common in SOHO/embedded firmware), and sub_445C5C / FUN_00445c5c is a disassembler-assigned label for the request-handling function inside that binary, indicating the analysis was performed on the stripped firmware image rather than source. The root cause is classified as CWE-400 (Uncontrolled Resource Consumption): a crafted request reaches this handler and drives the daemon into excessive CPU, memory, or loop consumption, exhausting resources and denying service. The CPE string provided (cpe:2.3:a:n/a:n/a:...) is a placeholder ('n/a') and does not authoritatively identify vendor/product, so the affected product must be taken from the description and the utt.com.cn download reference rather than from structured CPE data.

RemediationAI

No vendor-released patched firmware version is identified in the available data, so no exact fix version can be cited. Check the UTT download center (https://utt.com.cn/downloadcenter.php?filetypeid=3&model=518G&lang=zhcn) for firmware newer than v3.2.7-210919-161313 and apply it once available. As compensating controls: restrict access to the device's web management interface (gohead HTTP daemon) to a dedicated management VLAN or trusted admin hosts via ACLs, and explicitly ensure the management interface is not exposed on the WAN/internet-facing side - the trade-off is only that administrators must connect from the management segment. Place the gateway behind upstream filtering that rate-limits or drops malformed requests to the admin port, and monitor for unexpected reboots or daemon restarts as an early indicator; if the device supports disabling remote/HTTP management in favor of a local console, do so, accepting the loss of convenient web administration. Consult the GitHub write-up (https://github.com/akuma-QAQ/CVEreport/tree/main/518G/FUN_00445c5c) for the specific request pattern to block or detect.