This vulnerability (CVE-2026-31059) affects the UTT Aggressive HiPER 520W device running firmware version v3v1.7.7-180627. It is a remote command execution flaw in the /goform/formDia endpoint that permits attackers to execute arbitrary system commands remotely without authentication. The CVSS 3.1 base score is 9.8 (critical), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and full impact on confidentiality, integrity, and availability. The vulnerability is categorized under CWE-77 (Improper Neutralization of Special Elements used in a Command). No vendor advisory or patch information is currently available.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected device, potentially leading to full system compromise. This can result in unauthorized access, data theft, service disruption, or further network compromise. The critical CVSS score reflects the severity and ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected device, especially to the /goform/formDia endpoint, and monitor for suspicious activity. Do not expose the device directly to untrusted networks.