CVE-2026-2118 | UTT HiPER 810 1.7.4-141218 rehttpd formReleaseConnect sub_4407D4 Isp_Name command injection

A vulnerability described as critical has been identified in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_4407D4 of the file /goform/formReleaseConnect of the component rehttpd. Executing a manipulation of the argument Isp_Name can lead to command injection.

This vulnerability is tracked as CVE-2026-2118. The attack can be launched remotely. Moreover, an exploit is present.