PT-2026-21457 · Unknown · Utt Hiper 810

Yecp · Published 2026-02-22 · Updated 2026-02-28 · CVE-2026-2981

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UTT HiPER 810G versions up to 1.7.7-1711

Description A buffer overflow condition exists in the strcpy function within the /goform/formTaskEdit ap file of UTT HiPER 810G. The issue stems from manipulating the txtMin2 argument. This allows for remote attacks. The exploit for this issue has been publicly released.

Recommendations Versions prior to 1.7.7-1711 should be updated. As a temporary workaround, consider restricting the use of the strcpy function within the /goform/formTaskEdit ap file until a patch is available. Avoid using the txtMin2 argument in the affected file to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-2981

Affected Products

Utt Hiper 810

References · 16

• 🔥 https://github.com/7wkajk/CVE-VUL/blob/main/5.md#poc · Exploit
• 🔥 https://github.com/7wkajk/CVE-VUL/blob/main/5.md · Exploit
• https://osv.dev/vulnerability/CVE-2026-2981 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2981 · Security Note
• https://twitter.com/cracbot/status/2027700368130641986 · Twitter Post
• https://twitter.com/cracbot/status/2027338067548491781 · Twitter Post
• https://vuldb.com/?id.347365 · Note
• https://t.me/CVEtracker/45488 · Telegram Post
• https://twitter.com/CVEnew/status/2025892023559979394 · Twitter Post
• https://twitter.com/CveFindCom/status/2025868432046952867 · Twitter Post
• https://twitter.com/CveTodo/status/2025865410789196180 · Twitter Post
• https://twitter.com/TheHackerWire/status/2025873470052323357 · Twitter Post
• https://twitter.com/vuldb/status/2025610084160831488 · Twitter Post
• https://vuldb.com/?ctiid.347365 · Note
• https://twitter.com/VulmonFeeds/status/2025869634021302339 · Twitter Post