CVE-2026-2188 | UTT 进取 521G 3.1.1-190816 /goform/formPdbUpConfig sub_446B18 policyNames os command injection

A vulnerability classified as critical was found in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub_446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the argument policyNames can lead to os command injection.

This vulnerability is registered as CVE-2026-2188. It is possible to launch the attack remotely. Furthermore, an exploit is available.