PT-2026-7014 · Unknown · Utt 进取 521G

Cha0Yang · Published 2026-02-08 · Updated 2026-02-08 · CVE-2026-2182

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:N/AC:L/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UTT 进取 521G version 3.1.1-190816

Description A flaw exists in the doSystem function within the /goform/setSysAdm file. Manipulation of the passwd1 argument can result in command injection. This issue may be exploited remotely. The exploit is publicly available.

Recommendations Apply updates to address the vulnerability in the doSystem function. As a temporary workaround, restrict access to the /goform/setSysAdm file. Avoid using the passwd1 argument in the affected function until the issue is resolved.

Exploit

Fix

DoS

Special Elements Injection

Command Injection

Weakness Enumeration

CWE-74

CWE-77

Related Identifiers

CVE-2026-2182

Affected Products

Utt 进取 521G

References · 10

• 🔥 https://github.com/cha0yang1/UTT521G/blob/main/RCE1.md#poc · Exploit
• 🔥 https://github.com/cha0yang1/UTT521G/blob/main/RCE1.md · Exploit
• https://osv.dev/vulnerability/CVE-2026-2182 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2182 · Security Note
• https://twitter.com/CVEnew/status/2020601651959136370 · Twitter Post
• https://vuldb.com/?id.344885 · Note
• https://vuldb.com/?ctiid.344885 · Note
• https://t.me/cveNotify/151326 · Telegram Post
• https://t.me/CVEtracker/44130 · Telegram Post
• https://vuldb.com/?submit.749712 · Note