CVE-2026-7512
Published: 01 May 2026
Summary
CVE-2026-7512 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability. Its CVSS base score is 7.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 37.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2026-7512 is a buffer overflow vulnerability affecting UTT HiPER 1200GW routers up to version 2.5.3-1703. The flaw resides in the strcpy function within the /goform/formUser file, stemming from CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-120 (Buffer Copy without Checking Size of Input). Published on 2026-05-01, it carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high severity due to its potential for remote exploitation.
An attacker with low privileges can exploit this vulnerability remotely without requiring user interaction. By manipulating input to the affected strcpy function, they can trigger a buffer overflow, potentially achieving high impacts on confidentiality, integrity, and availability, such as arbitrary code execution or denial of service.
VulDB advisories at https://vuldb.com/vuln/360323 and https://vuldb.com/vuln/360323/cti detail the vulnerability, while a proof-of-concept exploit is publicly available on GitHub at https://github.com/kirlic123/IOTvulner/tree/main/4035/3 and referenced via https://vuldb.com/submit/803995. No specific patches or mitigations are outlined in the provided references.
The published exploit indicates active potential for real-world use against vulnerable UTT HiPER 1200GW devices.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-26464
Vulnerability details
A flaw has been found in UTT HiPER 1200GW up to 2.5.3-1703. The affected element is the function strcpy of the file /goform/formUser. Executing a manipulation can lead to buffer overflow. The attack can be launched remotely. The exploit has…
more
been published and may be used.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in public-facing web form (/goform/formUser) enables remote exploitation for RCE on the router, mapping to T1190; resulting arbitrary code execution facilitates Unix shell access via T1059.004.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Requires timely identification, reporting, and remediation of flaws such as the buffer overflow in the strcpy function of /goform/formUser.
Mandates validation of information inputs to the affected /goform/formUser endpoint to prevent oversized inputs from triggering the buffer overflow.
Implements memory protections like stack canaries or non-executable stacks to mitigate exploitation of the buffer overflow vulnerability.