CVE-2026-31059

CVE-2026-31059 is a critical remote command execution vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 that permits attackers to execute arbitrary commands through a specially crafted string. The vulnerability affects network equipment manufactured by UTT and poses significant risk to organizations deploying this device model and firmware version. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with an unauthenticated network-based attack vector requiring no user interaction or special privileges. The attack complexity is low, meaning exploitation can be performed reliably without requiring complex conditions. Successful exploitation provides attackers with complete compromise of the affected device, including confidentiality, integrity, and availability impacts. Exploitation status indicates this vulnerability is not currently listed on CISA's Known Exploited Vulnerabilities (KEV) catalog, and appears to be inactive on exploit tracking platforms. However, the moderate FAUCET risk score of 45/100 and low EPSS score suggest limited current community attention and exploit code availability. Organizations should nonetheless prioritize remediation given the critical severity rating and network-accessible attack surface.