CVE-2026-7419 in HiPER 1250GW

Résumé

par MITRE • 30/04/2026

A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file route/goform/formTaskEdit_ap. The manipulation of the argument Profile leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: VulDB
• Divulgation: 30/04/2026
• Modérer: accepté
• Entrée: VDB-360156
• CPE: prêt
• CWE: CWE-120 (confirmé)
• Exploitation: Télécharger
• CVSS: 8.8 (VulDB)
• EPSS: 0.00019
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-7419
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-7419
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-7419/