Cyber Resilience

CVE-2026-7512

High

Published: 01 May 2026

Published
01 May 2026
Modified
01 May 2026
KEV Added
Patch
CVSS Score v4 7.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0047 37.4th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2026-7512 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability. Its CVSS base score is 7.4 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 37.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Deeper analysis

CVE-2026-7512 is a buffer overflow vulnerability affecting UTT HiPER 1200GW routers up to version 2.5.3-1703. The flaw resides in the strcpy function within the /goform/formUser file, stemming from CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-120 (Buffer Copy without Checking Size of Input). Published on 2026-05-01, it carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high severity due to its potential for remote exploitation.

An attacker with low privileges can exploit this vulnerability remotely without requiring user interaction. By manipulating input to the affected strcpy function, they can trigger a buffer overflow, potentially achieving high impacts on confidentiality, integrity, and availability, such as arbitrary code execution or denial of service.

VulDB advisories at https://vuldb.com/vuln/360323 and https://vuldb.com/vuln/360323/cti detail the vulnerability, while a proof-of-concept exploit is publicly available on GitHub at https://github.com/kirlic123/IOTvulner/tree/main/4035/3 and referenced via https://vuldb.com/submit/803995. No specific patches or mitigations are outlined in the provided references.

The published exploit indicates active potential for real-world use against vulnerable UTT HiPER 1200GW devices.

EU & UK References

Vulnerability details

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-1703. The affected element is the function strcpy of the file /goform/formUser. Executing a manipulation can lead to buffer overflow. The attack can be launched remotely. The exploit has…

more

been published and may be used.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1059.004 Unix Shell Execution
Adversaries may abuse Unix shell commands and scripts for execution.
Why these techniques?

Buffer overflow in public-facing web form (/goform/formUser) enables remote exploitation for RCE on the router, mapping to T1190; resulting arbitrary code execution facilitates Unix shell access via T1059.004.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2026-7856Shared CWE-119, CWE-120
CVE-2026-7747Shared CWE-119, CWE-120
CVE-2025-10443Shared CWE-119, CWE-120
CVE-2026-3272Shared CWE-119, CWE-120
CVE-2026-6630Shared CWE-119, CWE-120
CVE-2026-7055Shared CWE-119, CWE-120
CVE-2026-1162Shared CWE-119, CWE-120
CVE-2025-12232Shared CWE-119, CWE-120
CVE-2025-15459Shared CWE-119, CWE-120
CVE-2025-7463Shared CWE-119, CWE-120

Affected Assets

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Requires timely identification, reporting, and remediation of flaws such as the buffer overflow in the strcpy function of /goform/formUser.

prevent

Mandates validation of information inputs to the affected /goform/formUser endpoint to prevent oversized inputs from triggering the buffer overflow.

prevent

Implements memory protections like stack canaries or non-executable stacks to mitigate exploitation of the buffer overflow vulnerability.

References