CVE-2026-11517 is a high-severity buffer overflow vulnerability affecting UTT HiPER 2610G devices running firmware up to 3.0.0-171107. The issue arises from improper handling of the GroupName parameter in the strcpy function of the /goform/formConfigDnsFilterGlobal endpoint, allowing remote attackers to cause a buffer overflow. The vulnerability requires no user interaction and has a CVSS 4.0 base score of 8.7, indicating high impact on confidentiality, integrity, and availability. Although the exploit has been publicly disclosed, there is no indication of active exploitation in the wild. No official patch or remediation level has been announced by the vendor as of the publication date.

Successful exploitation can lead to a buffer overflow, potentially allowing remote attackers to execute arbitrary code or cause denial of service on affected UTT HiPER 2610G devices. The vulnerability impacts confidentiality, integrity, and availability with high severity. Since the attack vector is network-based and requires no user interaction, affected devices are at significant risk if exposed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected device's management interfaces to trusted sources only. Monitor vendor communications for updates regarding patches or mitigations.