UTT 521G OS Command Injection Vulnerability (CVE-2026-2188)

From the webpage screenshot, the following key vulnerability information can be obtained: Vulnerability Name: UTT 进取 521G 3.1.1-190816 /goform/formPdbUpConfig sub_446B18 policyNames os command injection Vulnerability Type: os command injection (command injection) CVE ID: CVE-2026-2188, GCVE-100-344891 CVSS Scores: - CVSSv3 Base Score: 7.2 - CVSSv3 Temp Score: 6.5 - CVSSv2 Base Score: 7.2 - CVSSv2 Temp Score: 6.5 Affected Product: - Vendor: UTT - Product: 进取 521G - Version: 3.1.1-190816 Vulnerability Description: - A vulnerability, classified as critical, has been found in UTT 进取 521G 3.1.1-190816. This vulnerability is documented as CVE-2026-2188. The attack can be initiated remotely. Additionally, an exploit exists. Exploit Information: - Class: Os command injection - CWE: CWE-78 / CWE-77 / CWE-74 - CAPEC: CAPEC-119 - ATT&CK: T1202 - The exploit is available at github.com Threat Intelligence: - CTI Interest Score: 2.45 - Interest: - Active Actors: - Active APT Groups: Timeline: - 02/07/2026 Advisory disclosed - 02/07/2026 +0 days VulDB entry created - 02/07/2026 +0 days VulDB entry last update Sources: - Advisor: github.com - Status: Not defined - CVE: CVE-2026-2188 - GCVE (CVE): GCVE-0-2026-2188 - GCVE (VulDB): GCVE-100-344891 - SCIP: https://www.scip.ch/en/?labs.20161013

Goal Reached Thanks to every supporter — we hit 100%!

UTT 521G OS Command Injection Vulnerability (CVE-2026-2188)