CVE-2026-2070 | UTT 进取 520W 1.7.7-180627 formPolicyRouteConf strcpy GroupName buffer overflow

A vulnerability described as critical has been identified in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /goform/formPolicyRouteConf. Such manipulation of the argument GroupName leads to buffer overflow.

This vulnerability is documented as CVE-2026-2070. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.