High severity · published Apr 13, 2026
CVE-2026-6186
UTT HiPER 1200GW formNatStaticMap strcpy buffer overflow
8.8
CVSS
0.6%
EPSS
No
On KEV
Description
A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This vulnerability affects the function strcpy of the file /goform/formNatStaticMap. The manipulation of the argument NatBind leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
H1
HiPER 1200GW · UTT
2.5.3-170306 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-6186
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-6186
github.com
https://github.com/lin-3-start/lin-cve/blob/main/Amao/1.md
vuldb.com
https://vuldb.com/submit/797304
vuldb.com
https://vuldb.com/vuln/357108
vuldb.com
https://vuldb.com/vuln/357108/cti
More from HiPER 1200GW
9.9
CVE-2026-76003
UTT HiPER 1200GW formGroupConfig strcpy stack-based overflow
8.8
CVE-2026-78170
UTT HiPER 1200GW formConfigFastDirectionW strcpy buffer overflow
8.8
CVE-2026-19341
UTT HiPER 1200GW pptpSrvGlobalConfig strcpy stack-based overflow
8.8
CVE-2026-18898
UTT HiPER 1200GW ConfigAdvideo strcpy stack-based overflow
8.8
CVE-2026-10293
UTT HiPER 1200GW formFireWall strcpy stack-based overflow