Utt Hiper 810 vulnerabilities

CVE-2026-2135 [HIGH] CWE-74 CVE-2026-2135: A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_43F020 of the file /goform/formPdbUpConfig. Performing a manipulation of the argument policyNames results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

CVE-2026-2080 [HIGH] CWE-74 CVE-2026-2080: A vulnerability has been found in UTT HiPER 810 1.7.4-141218. This issue affects the function setSys A vulnerability has been found in UTT HiPER 810 1.7.4-141218. This issue affects the function setSysAdm of the file /goform/formUser. The manipulation of the argument passwd1 leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this di

CVE-2026-1162 [CRITICAL] CWE-119 CVE-2026-1162: A flaw has been found in UTT HiPER 810 1.7.4-141218. The impacted element is the function strcpy of A flaw has been found in UTT HiPER 810 1.7.4-141218. The impacted element is the function strcpy of the file /goform/setSysAdm. This manipulation of the argument passwd1 causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

CVE-2026-2118 [HIGH] CWE-74 CVE-2026-2118: A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function s A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_4407D4 of the file /goform/formReleaseConnect of the component rehttpd. Executing a manipulation of the argument Isp_Name can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.