CVE-2026-3016 - Vulnerability Analysis

Overview

UTT HiPER 810G <= 1.7.7-171114 contains a buffer overflow caused by improper handling of the "except" argument in /goform/formP2PLimitConfig, letting remote attackers cause memory corruption, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can cause memory corruption, potentially leading to denial of service or remote code execution.

Mitigation

Update to the latest version beyond 1.7.7-171114.

References

• https://github.com/xhsy0314/CVEReport/blob/main/UTT-2/README.md
• https://github.com/xhsy0314/CVEReport/blob/main/UTT-2/README.md#poc
• https://vuldb.com/?ctiid.347376
• https://vuldb.com/?id.347376
• https://vuldb.com/?submit.756249

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 23, 2026

🟠 CVE-2026-3016 - High (8.8) A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. The affected element is the function strcpy of the file /goform/formP2PLimitConfig. The manipulation of the argument except leads to buffer overflow. Remote exploitation of the a... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3016/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner