CVE-2026-76004— UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow
Quick assessment
Affected
UTT HiPER 1250GW
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 UTT HiPER 1250GW 至 3.2.7-210907-180535 版本中检测到一个安全漏洞。HTTP 处理程序组件中文件 的 函数受此漏洞影响。对参数 的操作会导致基于栈的缓冲区溢出。攻击者可以远程发起该攻击。该漏洞利用代码已公开披露，可能被利用。
Possible ATT&CK Techniques 3 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application T1203 · Exploitation for Client ExecutionAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| UTT | HiPER 1250GW | 3.2.7-210907-180535 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-76004
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow
Source: CVE Program / CVE List V5
Vulnerability Description
A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argument pvid leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| UTT | HiPER 1250GW | 3.2.7-210907-180535 |
cpe:2.3:a:utt:hiper_1250gw:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-76004
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Verified env
Premium
Qwen3.6-35B-A3B
· 6602 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-76004
请登录查看更多情报信息。
Other References for CVE-2026-76004 (1)
IV. Related Vulnerabilities
Same product: HiPER 1250GW
-
CVE-2026-78169
UTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy -
CVE-2026-18897
UTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based ov -
CVE-2026-18895
UTT HiPER 1250GW APSecurity_5g strcpy stack-based overflow -
CVE-2026-14721
UTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-ba -
CVE-2026-9632
UTT HiPER 1250GW Web Management formGroupConfig strcpy stack
Same vendor: UTT
-
CVE-2026-78170
UTT HiPER 1200GW formConfigFastDirectionW strcpy buffer over -
CVE-2026-78169
UTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy -
CVE-2026-76003
UTT HiPER 1200GW formGroupConfig strcpy stack-based overflow -
CVE-2026-19341
UTT HiPER 1200GW pptpSrvGlobalConfig strcpy stack-based over -
CVE-2026-18898
UTT HiPER 1200GW ConfigAdvideo strcpy stack-based overflow
Same weakness: CWE-121
-
CVE-2026-68960
SKYSEA Client View/IT Manager堆栈缓冲区溢出漏洞 -
CVE-2026-76071
Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Pa -
CVE-2026-76070
Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Passw -
CVE-2026-78169
UTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy -
CVE-2026-78050
Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-
V. Comments for CVE-2026-76004
No comments yet