CVE-2026-52186

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to execute arbitrary code via the gohead/sub_463bbc component

Published 2026-07-01. Last modified 2026-07-02.