CVE-2026-2067 | UTT 进取 520W 1.7.7-180627 formTimeGroupConfig strcpy year1 buffer overflow

A vulnerability identified as critical has been detected in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/formTimeGroupConfig. The manipulation of the argument year1 leads to buffer overflow.

This vulnerability is listed as CVE-2026-2067. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.