CVE-2026-2118

A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_4407D4 of the file /goform/formReleaseConnect of the component rehttpd. Executing a manipulation of the argument Isp_Name can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
References
Link Resource
https://github.com/cha0yang1/UTT810CVE/blob/main/CVEreadme1.md Exploit Third Party Advisory
https://github.com/cha0yang1/UTT810CVE/blob/main/CVEreadme1.md#poc Exploit Third Party Advisory
https://vuldb.com/?ctiid.344693 Permissions Required VDB Entry
https://vuldb.com/?id.344693 Third Party Advisory VDB Entry
https://vuldb.com/?submit.746802 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:utt:810_firmware:1.7.4-141218:*:*:*:*:*:*:*
cpe:2.3:h:utt:810:4.0:*:*:*:*:*:*:*

History

13 Feb 2026, 18:46

Type Values Removed Values Added
CPE cpe:2.3:h:utt:810:4.0:*:*:*:*:*:*:*
cpe:2.3:o:utt:810_firmware:1.7.4-141218:*:*:*:*:*:*:*
References () https://github.com/cha0yang1/UTT810CVE/blob/main/CVEreadme1.md - () https://github.com/cha0yang1/UTT810CVE/blob/main/CVEreadme1.md - Exploit, Third Party Advisory
References () https://github.com/cha0yang1/UTT810CVE/blob/main/CVEreadme1.md#poc - () https://github.com/cha0yang1/UTT810CVE/blob/main/CVEreadme1.md#poc - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.344693 - () https://vuldb.com/?ctiid.344693 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.344693 - () https://vuldb.com/?id.344693 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.746802 - () https://vuldb.com/?submit.746802 - Third Party Advisory, VDB Entry
First Time Utt
Utt 810
Utt 810 Firmware

08 Feb 2026, 01:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-02-08 01:16

Updated : 2026-02-13 18:46


NVD link : CVE-2026-2118

Mitre link : CVE-2026-2118

CVE.ORG link : CVE-2026-2118


JSON object : View

Products Affected

utt

  • 810
  • 810_firmware
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')