CVE-2026-1140

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/ConfigExceptAli. The manipulation results in buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-120

Affected software

Vendor	Product	Versions
UTT	进取 520W	1.7.7-180627

References

https://github.com/cymiao1978/cve/blob/main/new/35.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.341731Permissions Required, VDB Entry
https://vuldb.com/?id.341731Third Party Advisory, VDB Entry
https://vuldb.com/?submit.735300Third Party Advisory, VDB Entry

Timeline

Published: Jan 19, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-114008.0An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote CVE-2026-114018.0An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL will allow a remote a CVE-2026-114026.4The Services Section Block – Showcase Service Details in Grid or Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting v CVE-2026-114037.5A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized a CVE-2026-1140317.8Incorrect permission assignment allows local privilege escalation to SYSTEM on affected releases of the Illumio VEN for Windows. Code execut CVE-2026-1140327.8The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability. A low-privileged, aut CVE-2026-1140385.1A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending CVE-2026-1140396.3A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqli_query of the file re CVE-2026-114047.5Cesanta Mongoose before 7.22 contains an out-of-bounds read in the built-in TLS server function mg_tls_server_recv_hello(), which uses an at CVE-2026-1140403.5A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.get_model_meta CVE-2026-1140416.5FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte count as wide-c CVE-2026-1140426.5FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocat