CVE-2026-9628

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown function of the file /goform/formPptpClientConfig of the component Web Management Interface. This manipulation of the argument PPTP server address/username/password/tunnel name causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

• CWE-119
• CWE-121

• https://github.com/luozhibo-sec/cve/blob/main/10.md
• https://vuldb.com/submit/818380
• https://vuldb.com/vuln/365684
• https://vuldb.com/vuln/365684/cti

Published

May 27, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9627A security flaw has been discovered in UTT HiPER 1200GW up t…8.8
• CVE-2026-96271Photoview through 2.4.0 contains an authorization bypass vul…7.1
• CVE-2026-96272ClipBucket v5 before 5.5.3-#182 contains a blind SQL injecti…7.5
• CVE-2026-96273Ghidra before 12.1.4 fails to validate the TYPE_COL byte in …5.5
• CVE-2026-96275A malicious or compromised Flatpak repository can write atta…8.8
• CVE-2026-96276If a malicious SDK container declares an extension point wit…9.8
• CVE-2026-9629The Canvas plugin for WordPress is vulnerable to Stored Cros…6.4
• CVE-2026-9631A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7…8.8
• CVE-2026-9632A flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907…8.8
• CVE-2026-9633A security issue exists within the Redundancy Module Configu…7
• CVE-2026-9634A security issue exists within the Redundancy Module Configu…7
• CVE-2026-9635The WP Shortcode by MyThemeShop plugin for WordPress is vuln…6.4