What’s Vulnerable › Vulnerabilities

CVE-2026-2847: UTT HiPER 520 Web Management formReleaseConnect sub_44EFB4 os command injection

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-02-20 · updated 2026-06-17
• Weakness: CWE-77

Description

A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub_44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. The manipulation of the argument Isp_Name results in os command injection. The attack can be launched remotely. The exploit is now public and may be used.

Affected products

• UTT HiPER 520: 1.7.7-160105

References

• https://github.com/cha0yang1/UTT520CVE/blob/main/UTTRCE2.md
• https://vuldb.com/?ctiid.347083
• https://vuldb.com/?id.347083
• https://vuldb.com/?submit.753965

Get alerted when CVE-2026-2847 or the next vulnerability affects your stack