CVE-2026-2846 | UTT HiPER 520 1.7.7-160105 Web Management Interface /goform/formPdbUpConfig sub_44D264 policyNames os command injection

A vulnerability was found in UTT HiPER 520 1.7.7-160105. It has been rated as critical. This impacts the function sub_44D264 of the file /goform/formPdbUpConfig of the component Web Management Interface. The manipulation of the argument policyNames leads to os command injection.

This vulnerability is documented as CVE-2026-2846. The attack can be initiated remotely. Additionally, an exploit exists.