The vulnerability CVE-2026-5566 affects UTT HiPER 1250GW devices running firmware up to version 3.2.7-210907-180535. It arises from improper handling of the NatBind argument in the strcpy function located in /goform/formNatStaticMap, leading to a buffer overflow condition. This flaw allows remote attackers to potentially execute arbitrary code or cause denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Although an exploit is publicly available, there is no vendor-provided patch or official remediation information at this time.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on affected UTT HiPER 1250GW devices. The attacker does not require privileges or user interaction, making exploitation feasible over the network. The high CVSS score reflects significant impact on device confidentiality, integrity, and availability. The availability of a public exploit increases the likelihood of attacks, though no in-the-wild exploitation has been confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected device's management interfaces to trusted sources only. Monitor vendor channels for updates and apply patches promptly once available. Avoid exposure of the device to untrusted networks to reduce exploitation risk.