CVE-2026-2188: Utt 521g Firmware

High severity, CVSS 7.2. EPSS: 7.2% chance of exploitation in the next 30 days.

A vulnerability was determined in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub_446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the argument policyNames can lead to os command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

• Utt 521g Firmware: version 3.1.1-190816 only

Published 2026-02-08. Last modified 2026-06-17.