CVE-2026-2847 | UTT HiPER 520 1.7.7-160105 Web Management Interface formReleaseConnect sub_44EFB4 Isp_Name os command injection

A vulnerability categorized as critical has been discovered in UTT HiPER 520 1.7.7-160105. Affected is the function sub_44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. The manipulation of the argument Isp_Name results in os command injection.

This vulnerability is reported as CVE-2026-2847. The attack can be launched remotely. Moreover, an exploit is present.