CVE-2026-76003: Stack-based Buffer Overflow in UTT HiPER 1200GW
CVE-2026-76003 is a critical stack-based buffer overflow vulnerability in UTT HiPER 1200GW version 2.5.3-170306. The flaw exists in the strcpy function within the /goform/formGroupConfig file and can be triggered remotely by manipulating the timestart argument. Public exploit code is available, increasing the risk of attacks.
AI Analysis
Technical Summary
This vulnerability affects UTT HiPER 1200GW up to version 2.5.3-170306. It is caused by improper handling of input in the strcpy function in the /goform/formGroupConfig endpoint, where a specially crafted timestart argument can overflow the stack buffer. The vulnerability is remotely exploitable without user interaction and has a CVSS 4.0 score of 9.4, indicating critical severity. Exploit code has been publicly released, which could facilitate attacks.
Potential Impact
Successful exploitation can lead to a stack-based buffer overflow, potentially allowing remote code execution or denial of service. Given the critical CVSS score and public availability of exploit code, affected systems are at high risk if unpatched.
Mitigation Recommendations
No patch or official remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the vulnerable endpoint and monitor for exploit attempts.
CVE-2026-76003: Stack-based Buffer Overflow in UTT HiPER 1200GW
Description
CVE-2026-76003 is a critical stack-based buffer overflow vulnerability in UTT HiPER 1200GW version 2.5.3-170306. The flaw exists in the strcpy function within the /goform/formGroupConfig file and can be triggered remotely by manipulating the timestart argument. Public exploit code is available, increasing the risk of attacks.
CVSS v4.0
Score 9.4critical
Affected software
UTT
HiPER 1200GW
cpe:2.3:a:utt:hiper_1200gw:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects UTT HiPER 1200GW up to version 2.5.3-170306. It is caused by improper handling of input in the strcpy function in the /goform/formGroupConfig endpoint, where a specially crafted timestart argument can overflow the stack buffer. The vulnerability is remotely exploitable without user interaction and has a CVSS 4.0 score of 9.4, indicating critical severity. Exploit code has been publicly released, which could facilitate attacks.
Potential Impact
Successful exploitation can lead to a stack-based buffer overflow, potentially allowing remote code execution or denial of service. Given the critical CVSS score and public availability of exploit code, affected systems are at high risk if unpatched.
Mitigation Recommendations
No patch or official remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the vulnerable endpoint and monitor for exploit attempts.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-08-18T18:49:09.139Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a8512d8c6e8be03320716bd
Added to database: 08/19/2026, 02:20:08 UTC
Last enriched: 09/11/2026, 10:16:50 UTC
Last updated: 10/02/2026, 14:46:10 UTC
Views: 115
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.