CVE-2026-4487 - Vulnerability Analysis

Overview

UTT HiPER 1200GW <= 2.5.3-170306 contains a buffer overflow caused by unsafe use of strcpy in /goform/websHostFilter, letting remote attackers execute arbitrary code, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version beyond 2.5.3-170306.

References

• https://github.com/hmKunlun/UTTHiPER/blob/main/HiPER%201200GW.md
• https://vuldb.com/?ctiid.352010
• https://vuldb.com/?id.352010
• https://vuldb.com/?submit.773538

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 20, 2026

🟠 CVE-2026-4487 - High (8.8) A vulnerability was determined in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/websHostFilter. This manipulation causes buffer overflow. It is possible to initiate the attack remotely. The exploit has b... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4487/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner