CVE-2026-52196 - Vulnerability Details

Description

Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_416f28 component

Published: 2026-06-30

Score: 7.5 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The CVE documents a buffer overflow (CWE-120) in the gohead/sub_416f28 component of UTT’s nv518G router firmware nv518GV3v3.2.7-210919-161313. The overflow can be triggered by a remote attacker via a crafted packet sent to the gohead interface, causing a crash and a denial of service. The description states no code execution or privilege escalation is achieved.

Affected Systems

The affected product is the UTT nv518G series router, specifically firmware version nv518GV3v3.2.7-210919-161313. No broader version range is indicated, so only this build is known to host the flaw.

Risk and Exploitability

The vulnerability has a CVSS score of 7.5, indicating high severity. The EPSS score of less than 1% suggests a very low probability of exploitation, and the flaw is not listed in CISA’s KEV catalog. With no public exploit at the time, the main threat is periodic service outages rather than data compromise. A remote attacker could trigger the bug from any host that can reach the gohead interface; network isolation can mitigate the exposure.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

affected

Version	Status	Constraints
`n/a`	affected	—

No data.

Vendor Product Confidence Versions

Utt

Nv518g

100%

Version	Status	Scheme	Platform
`nv518GV3v3.2.7-210919-161313`	affected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Apply the latest firmware update from UTT that addresses the buffer overflow.
Configure firewall or network segmentation to block external access to the port or protocol used by the gohead sub_416f28 component.
Monitor system logs for recurrent crash events and network traffic indicative of exploitation attempts.

Generated by OpenCVE AI on August 3, 2026 at 06:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00452.

Exploitation poc

Automatable yes

Technical Impact partial

References

Link	Providers
https://github.com/akuma-QAQ/CVEreport/tree/main/518G/FUN_00416f28
https://utt.com.cn/downloadcenter.php?filetypeid=3&model=518G&lang=zhcn

History

Mon, 03 Aug 2026 07:15:00 +0000

Type	Values Removed	Values Added
Title	Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Wed, 29 Jul 2026 23:30:00 +0000

Type	Values Removed	Values Added
Title		Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Sun, 26 Jul 2026 00:15:00 +0000

Type	Values Removed	Values Added
Title	Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware

Wed, 22 Jul 2026 16:30:00 +0000

Type	Values Removed	Values Added
Title		Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware

Wed, 15 Jul 2026 11:45:00 +0000

Type	Values Removed	Values Added
Title	Remote Denial of Service from UTT nv518G Firmware Buffer Overflow

Tue, 14 Jul 2026 02:00:00 +0000

Type	Values Removed	Values Added
Title		Remote Denial of Service from UTT nv518G Firmware Buffer Overflow

Sun, 12 Jul 2026 11:30:00 +0000

Type	Values Removed	Values Added
Title	Remote Buffer Overflow in UTT nv518G Router Firmware Leads to Denial of Service

Sat, 11 Jul 2026 10:00:00 +0000

Type	Values Removed	Values Added
Title		Remote Buffer Overflow in UTT nv518G Router Firmware Leads to Denial of Service

Fri, 10 Jul 2026 19:00:00 +0000

Type	Values Removed	Values Added
Title	Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Thu, 09 Jul 2026 08:45:00 +0000

Type	Values Removed	Values Added
Title		Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Tue, 07 Jul 2026 22:30:00 +0000

Type	Values Removed	Values Added
Title	Remote Buffer Overflow in UTT nv518G Router Firmware (GoHead Component)

Tue, 07 Jul 2026 05:15:00 +0000

Type	Values Removed	Values Added
Title		Remote Buffer Overflow in UTT nv518G Router Firmware (GoHead Component)

Mon, 06 Jul 2026 13:00:00 +0000

Type	Values Removed	Values Added
Title	Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Sun, 05 Jul 2026 23:45:00 +0000

Type	Values Removed	Values Added
Title		Buffer Overflow in UTT nv518G Firmware Causes Remote Denial of Service

Sun, 05 Jul 2026 07:45:00 +0000

Type	Values Removed	Values Added
Title	Buffer Overflow in UTT nv518G Firmware Causes Denial of Service

Sat, 04 Jul 2026 16:15:00 +0000

Type	Values Removed	Values Added
Title		Buffer Overflow in UTT nv518G Firmware Causes Denial of Service

Sat, 04 Jul 2026 08:30:00 +0000

Type	Values Removed	Values Added
Title	Buffer Overflow in UTT nv518G Firmware Causing Remote Denial of Service

Fri, 03 Jul 2026 17:30:00 +0000

Type	Values Removed	Values Added
Title		Buffer Overflow in UTT nv518G Firmware Causing Remote Denial of Service

Fri, 03 Jul 2026 09:45:00 +0000

Type	Values Removed	Values Added
Title	Buffer Overflow in UTT nv518G Firmware Allows Remote Denial of Service

Thu, 02 Jul 2026 20:30:00 +0000

Type	Values Removed	Values Added
Title		Buffer Overflow in UTT nv518G Firmware Allows Remote Denial of Service

Thu, 02 Jul 2026 15:15:00 +0000

Type	Values Removed	Values Added
Title	Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware

Thu, 02 Jul 2026 02:45:00 +0000

Type	Values Removed	Values Added
Title		Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware

Wed, 01 Jul 2026 21:15:00 +0000

Type	Values Removed	Values Added
Title	Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware
Weaknesses	CWE-119

Wed, 01 Jul 2026 15:30:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 01 Jul 2026 10:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Utt Utt nv518g
Vendors & Products		Utt Utt nv518g

Wed, 01 Jul 2026 01:15:00 +0000

Type	Values Removed	Values Added
Title		Remote Denial of Service via Buffer Overflow in UTT nv518G Firmware
Weaknesses		CWE-119 CWE-120

Tue, 30 Jun 2026 22:15:00 +0000

Type	Values Removed	Values Added
Description		Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_416f28 component
References		https://github.com/akuma-QAQ/CVEreport/tree/main/518G/FUN_00416f28 https://utt.com.cn/downloadcenter.php?filetypeid=3&model=518G&lang=zhcn

Subscriptions

Utt Nv518g

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-06-30T00:00:00.000Z

Updated: 2026-07-01T15:11:51.804Z

Reserved: 2026-06-08T00:00:00.000Z

Link: CVE-2026-52196

Vulnrichment

Updated: 2026-07-01T15:11:38.700Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-03T07:00:05Z

Weaknesses

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation poc

Automatable yes

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object