CVE-2026-4487

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was determined in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/websHostFilter. This manipulation causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Mar 20, 2026
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-448708.8Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operat CVE-2026-448718.8Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operat CVE-2026-448727.2A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitatio CVE-2026-448735.4A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administ CVE-2026-448744.9A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to acces CVE-2026-448776.5An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960 Switches. Successfu CVE-2026-448787.2A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to ac CVE-2026-448797.2A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform comm CVE-2026-44888.8A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected is the function strcpy of the file /goform/setSysAdm.CVE-2026-448808.8A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could al CVE-2026-448819.9Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swa CVE-2026-448828.1Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swa