CVE-2026-31065

CVE-2026-31065 is a buffer overflow vulnerability discovered in UTT Aggressive 520W v3 running firmware version v1.7.7-180627, specifically affecting the addCommand parameter within the formConfigCliForEngineerOnly function. The flaw allows remote attackers to trigger a Denial of Service condition through specially crafted input supplied to the vulnerable function. This vulnerability is limited to devices running the affected firmware version and is accessible only to authenticated users with engineer-level privileges. The vulnerability carries a CVSS v3.1 score of 4.5 (Medium severity) with an attack vector that requires adjacency to the target network. Exploitation requires high-level privileges and straightforward attack complexity, but the impact is limited exclusively to availability, potentially causing system crashes or service interruptions. No confidentiality or integrity impacts are associated with this flaw. There is currently no evidence of active exploitation in the wild, as indicated by its absence from CISA's Known Exploited Vulnerabilities catalog. The extremely low EPSS score of 0.00016 and the inactive Hot List status suggest minimal community attention and low likelihood of near-term exploitation attempts. Organizations should prioritize patching based on their network exposure to affected UTT Aggressive 520W devices rather than immediate threat response.