CVE-2026-2135 | UTT HiPER 810 1.7.4-141218 /goform/formPdbUpConfig sub_43F020 policyNames command injection

A vulnerability was found in UTT HiPER 810 1.7.4-141218. It has been classified as critical. The impacted element is the function sub_43F020 of the file /goform/formPdbUpConfig. Performing a manipulation of the argument policyNames results in command injection.

This vulnerability is cataloged as CVE-2026-2135. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.