CVE-2026-14721 is a stack-based buffer overflow vulnerability in the UTT HiPER 1250GW device affecting an unspecified function within the /goform/ConfigWirelessBase_5g web endpoint. The vulnerability arises from improper handling of the 'ssid' parameter, allowing an attacker to overflow the stack remotely. The vulnerability affects firmware versions up to 3.2.7-210907-180535. The CVSS 4.0 base score is 8.7 (high), indicating a network attack vector with low complexity and no privileges required. Exploit code has been publicly disclosed, but no vendor patch or official fix is documented at this time.

Successful exploitation of this vulnerability can lead to a stack-based buffer overflow, potentially allowing remote attackers to execute arbitrary code or cause a denial of service on the affected device. The vulnerability is remotely exploitable without user interaction and requires no privileges, increasing the risk of compromise. However, no known exploits in the wild have been reported yet.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's advisories for updates and apply any future patches promptly. Until a fix is released, restricting remote access to the affected web endpoint and limiting exposure of the device to untrusted networks may reduce risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.