What is the CVSS score of CVE-2026-7419?

CVE-2026-7419 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P. EPSS exploitation probability: 0.0%.

Is there a public PoC exploit available for CVE-2026-7419?

Yes, a public proof-of-concept exploit is available for CVE-2026-7419. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-7419?

Within 24 hours: identify all UTT HiPER 1250GW devices in production, document their firmware versions, and assess which require emergency remediation. Within 7 days: restrict management interface access to a defined administrative network segment (VPN jump host or secured subnet), rotate all administrative credentials to unique strong passwords, and enable maximum audit logging on each device. Within 30 days: establish formal communication with UTT support to obtain a patch timeline and any interim security recommendations; implement continuous device monitoring for crashes or anomalous configuration changes; develop a contingency replacement plan in case no patch is forthcoming within 60 days; consider deploying a parallel gateway for failover capability.

UTT HiPER 1250GW CVE-2026-7419

HIGH

Classic Buffer Overflow (CWE-120)

2026-04-29 VulDB

Buffer Overflow Hiper 1250Gw Utt

7.4

CVSS 4.0 · Vendor: VulDB

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Reach device web management interface
Delivery

Authenticate with low-privilege credentials
Exploit

Send oversized 'Profile' to formTaskEdit_ap
Execution

Overflow stack buffer via unbounded strcpy
Persist

Hijack saved return address
Impact

Execute code or crash gateway

Vulnerability Assessment

Weakness	CWE CWE-120 ASVS 5.0 V15 - Secure Coding and Architecture Buffer copy size validation MITRE ATT&CK 1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Exploitation Conditions	Exploitation requires reaching the device's HTTP management interface and having a low-privilege authenticated session (CVSS PR:L), then sending an over-length value in the 'Profile' argument to the route/goform/formTaskEdit_ap handler. Limiting factors: valid management credentials or an active admin-panel session are needed (not fully unauthenticated), the vulnerable endpoint must be network-reachable (so WAN-side exposure vs. LAN/management-only binding is decisive), and only the specific firmware line up to 3.2.7-210907-180535 on the UTT HiPER 1250GW is affected. No user interaction is required (UI:N) and attack complexity is low (AC:L).
Impact	Signals conflict in a way that lowers real-world urgency despite the total technical impact. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N, VC:H/VI:H/VA:H, score 7.4) indicates a network-reachable, low-complexity attack requiring only low privileges and yielding full confidentiality/integrity/availability loss on the device. SSVC aligns on 'total' technical impact but rates Automatable: no and exploitation only at 'poc' - not active. Countervailing signals dominate: EPSS is 0.04% (12th percentile), the CVE is NOT in CISA KEV, and the product has a small deployment footprint. PR:L means an attacker needs valid (even minimal) management credentials or an authenticated session, which meaningfully constrains opportunistic attacks. Net: a genuinely high-impact bug on the device itself but low real-world prevalence and no evidence of exploitation, making it a moderate priority mainly for organizations that actually run UTT gateways with exposed management interfaces.
Exploit ScenarioDerived	An attacker who has obtained a low-privilege management session on a reachable HiPER 1250GW (e.g., via weak/default credentials or an exposed management port) sends a crafted request to route/goform/formTaskEdit_ap with an oversized 'Profile' value. The unbounded strcpy() overflows a stack buffer, crashing the gateway or, with a tuned payload, redirecting execution to attacker-controlled code. Public exploit code for this issue is available, lowering the skill required to reproduce it.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

No patch listed yet 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Jul 24, 2026

Stack buffer overflow in the UTT HiPER 1250GW gateway/router (firmware up to 3.2.7-210907-180535) lets a low-privileged authenticated attacker corrupt memory by supplying an oversized 'Profile' parameter to the formTaskEdit_ap web handler, which copies it via an unbounded strcpy(). The flaw is remotely reachable over the device's management interface and publicly available exploit code exists, though it is not listed in CISA KEV and carries a very low EPSS score (0.04%). Successful exploitation can crash the device or potentially execute attacker-controlled code with the privileges of the web server process.

RemediationAI

No vendor-released patch identified at time of analysis, and no fixed firmware version is cited in the source data - monitor UTT for a firmware release superseding 3.2.7-210907-180535 and apply it once published. As compensating controls, restrict access to the device's web management interface: bind administration to a trusted management VLAN or LAN interface only and disable remote/WAN-side management so the formTaskEdit_ap endpoint is not reachable from untrusted networks (trade-off: administrators must be on the management network or use a VPN). Enforce strong, unique administrative credentials and limit the number of accounts, since exploitation requires an authenticated low-privilege session (PR:L); tightening account access directly raises the bar. Place the management interface behind an ACL/firewall permitting only specific admin source IPs. Refer to the VulDB advisory at https://vuldb.com/vuln/360156 for tracking; the public exploit write-up is at https://github.com/kirlic123/IOTvulner/blob/main/4035/2/2.md.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

The affected component is the embedded HTTP administration server of the UTT HiPER 1250GW, a Chinese-market enterprise gateway/VPN router. The vulnerable code path is route/goform/formTaskEdit_ap, a goform CGI-style handler used to edit task/AP profile settings. The root cause is CWE-120 (Buffer Copy without Checking Size of Input, classic buffer overflow): the handler passes the user-supplied 'Profile' argument directly to strcpy(), which copies until a NUL terminator with no bounds check against the destination buffer. On the MIPS/ARM-class SoCs typical of these appliances, overflowing a fixed-size stack buffer can overwrite saved return addresses, enabling denial of service and, depending on stack layout and mitigations (these embedded builds frequently lack stack canaries/ASLR), remote code execution.

Know when Hiper 1250Gw gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (VulDB) PRIMARY 7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

vuln.today AI 8.8 HIGH

Management endpoint requires an authenticated low-privilege session (PR:L) but is network-reachable with no user interaction; unbounded strcpy overflow yields full device compromise, so C/I/A:H.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Attack Requirements

None

Privileges Required

Low

User Interaction

None

Vulnerable system: Confidentiality

High

Vulnerable system: Integrity

High

Vulnerable system: Availability

High

Subsequent system: Confidentiality

None

Subsequent system: Integrity

None

Subsequent system: Availability

None

Lifecycle Timeline

PoC Detected

Apr 30, 2026 - 14:52 vuln.today

Public exploit code

CVSS changed

Apr 29, 2026 - 23:22 NVD

8.8 (HIGH) 7.4 (HIGH)

CVE Published

Apr 29, 2026 - 22:15 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file route/goform/formTaskEdit_ap. The manipulation of the argument Profile leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Executive ViewAI

Why It Matters

The UTT HiPER 1250GW network gateway contains a remote buffer overflow affecting firmware versions through 3.2.7; publicly available exploit code exists and the vulnerability could enable authenticated attackers to crash or take control of a critical network device. Organizations operating this gateway model face risk of network outages and potential compromise of upstream network infrastructure, with no vendor patch currently available. Immediate access controls are required before this vulnerability can be leveraged through compromised credentials or insider threats.

Business Impact: High

Compensating Controls

No vendor-released patch identified at time of analysis. Interim mitigations: implement strict network-based access control restricting the management interface to VPN or isolated administrative subnets only; enforce unique administrator credentials across all device instances; implement network segmentation to prevent the device from becoming a pivot point between network zones; maintain current configuration backups for rapid restoration; deploy out-of-band monitoring to detect device crashes or suspicious behavior patterns; maintain inventory of replacement gateway hardware for rapid contingency deployment.

Threat Intelligence Overview

EPSS Score

0.0%

Top 88% exploitable

Prevalence

Low

niche Chinese enterprise gateway vendor, limited global deployment

Exploit

POC

Public exploit code exists

Social Media

Sightings

Data Quality

6 sources

Confidence: High

NVD

CVE.org

EPSS

Vulnrichment CIRCL

GitHub

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC Yes

EPSS 0.0%

Patch available No

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision

Scheduled

Exploitation

Poc

System Exposure· derived

Open

Automatable

Human Impact

High

Technical Impact

Total

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +37

PoC: +20

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.