CVE-2026-11516

MEDIUM

UTT HiPER 2610G formNatStaticMap strcpy buffer overflow

Title source: cna
STIX 2.1

Description

A vulnerability was found in UTT HiPER 2610G up to 3.0.0-171107. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument NatBinds results in buffer overflow. The exploit has been made public and could be used.

References (6)

Core 6
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-369136 | UTT HiPER 2610G formNatStaticMap strcpy buffer overflow
https://vuldb.com/vuln/369136
Signature, Permissions Required signature permissions-required
VDB-369136 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/369136/cti
Third Party Advisory third-party-advisory
CVE-2026-11516 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-11516
Third Party Advisory third-party-advisory
Submit #836275 | TUU HiPER 2610G <=v3.0.0-171107 Buffer Overflow
https://vuldb.com/submit/836275

Scores

CVSS v3 5.5
EPSS 0.0037
EPSS Percentile 28.6%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-119 CWE-120
Status published
Products (1)
UTT/HiPER 2610G 3.0.0-171107
Published Jun 08, 2026
Tracked Since Jun 08, 2026