Cyber Resilience

CVE-2026-6186

High

Published: 13 April 2026

Published
13 April 2026
Modified
22 April 2026
KEV Added
Patch
CVSS Score v4 7.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0061 44.7th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2026-6186 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability. Its CVSS base score is 7.4 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 44.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).

Deeper analysis

CVE-2026-6186 is a buffer overflow vulnerability affecting the UTT HiPER 1200GW router in versions up to 2.5.3-170306. The issue resides in the strcpy function within the /goform/formNatStaticMap file, where manipulation of the NatBind argument triggers the overflow. Associated with CWE-119 and CWE-120, it was published on 2026-04-13 and carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

A remote attacker with low privileges can exploit this vulnerability over the network with low complexity and no user interaction required. Successful exploitation enables high-impact outcomes, including unauthorized access to sensitive data (C:H), modification of system resources (I:H), and disruption of services (A:H), potentially leading to full compromise of the affected device.

Advisories and details are documented in references including https://github.com/lin-3-start/lin-cve/blob/main/Amao/1.md, https://vuldb.com/submit/797304, https://vuldb.com/vuln/357108, and https://vuldb.com/vuln/357108/cti. The exploit has been publicly disclosed and may be used in attacks.

EU & UK References

Vulnerability details

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This vulnerability affects the function strcpy of the file /goform/formNatStaticMap. The manipulation of the argument NatBind leads to buffer overflow. The attack is possible to be carried…

more

out remotely. The exploit has been disclosed publicly and may be used.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

Buffer overflow in web form handler (/goform/formNatStaticMap) on network-accessible router enables exploitation of public-facing application (T1190) and facilitates privilege escalation from low-priv account to full device compromise (T1068).

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2026-2935Shared CWE-119, CWE-120
CVE-2025-15461Shared CWE-119, CWE-120
CVE-2026-7288Shared CWE-119, CWE-120
CVE-2025-9781Shared CWE-119, CWE-120
CVE-2026-3814Shared CWE-119, CWE-120
CVE-2026-7749Shared CWE-119, CWE-120
CVE-2026-2904Shared CWE-119, CWE-120
CVE-2026-4318Shared CWE-119, CWE-120
CVE-2025-15217Shared CWE-119, CWE-120
CVE-2026-3274Shared CWE-119, CWE-120

Affected Assets

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly addresses the buffer overflow by requiring identification, reporting, and correction of the flaw in the strcpy function of /goform/formNatStaticMap.

prevent

Validates and sanitizes the NatBind input argument to prevent buffer overflow exploitation in the vulnerable web form handler.

prevent

Provides memory protections such as stack canaries, ASLR, and DEP to mitigate successful buffer overflow exploitation even if input validation fails.

References