LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-2981 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: February 24, 2026

UTT HiPER 810G - Buffer Overflow

Published: February 23, 2026Updated: February 24, 2026PoC AvailableRemote Exploitable

Overview

UTT HiPER 810G <= 1.7.7-1711 contains a buffer overflow caused by manipulation of the "txtMin2" argument in /goform/formTaskEdit_ap, letting remote attackers cause memory corruption, exploit requires crafted request.

Severity & Score

Severity: High
CVSS Score: 8.8
EPSS Score: 4.3%(Probability of exploitation in next 30 days)

Impact

Remote attackers can cause memory corruption, potentially leading to denial of service or code execution.

Mitigation

Update to the latest version.

Social Media Activity(2 posts)

Offensive Sequence
Offensive Sequence
@offseq
Feb 23, 2026

🚨 HIGH severity: CVE-2026-2981 affects UTT HiPER 810G ≤1.7.7-1711. Remote, unauthenticated buffer overflow in /goform/formTaskEdit_ap. Exploit code is public — patch unavailable. Restrict access & monitor endpoints! https://radar.offseq.com/threat/cve-2026-2981-buffer-overflow-in-utt-hiper-810g-ebbad869 #OffSeq #Vulnerability #Cybersecurity

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Feb 23, 2026

🟠 CVE-2026-2981 - High (8.8) A vulnerability was found in UTT HiPER 810G up to 1.7.7-1711. The affected element is the function strcpy of the file /goform/formTaskEdit_ap. The manipulation of the argument txtMin2 results in buffer overflow. The attack may be launched remotely... šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-2981/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2026-2981
Severity
High
CVSS Score
8.8
Type
buffer_overflow
Status
confirmed
EPSS
4.3%
Social Posts
2

CWE

  • CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

4.3%Probability of exploitation in the next 30 days