CVE-2026-31059 is a critical remote command execution flaw (CVSS 9.8) in the /goform/formDia component of the UTT Aggressive HiPER 520W, firmware v3v1.7.7-180627. A crafted string runs arbitrary commands. The record names no fix, so ask the vendor.
What's affected
The record names the UTT Aggressive HiPER 520W with firmware v3v1.7.7-180627. It does not say whether other versions are affected and does not give a fixed version.
How to check if you're exposed
Open the router's admin page and read the firmware version on the status or system page. Compare it with v3v1.7.7-180627.
Check whether the management interface is reachable from the internet or from guest networks, for example by testing from outside your network.
What to do now
- Ask the vendor whether a fixed firmware exists, and install it if so.
- Turn off remote management and restrict the admin interface to a trusted management network.
- Replace the device if the vendor offers no fix and it sits at a network edge.
- Add the device to your asset inventory so it is not forgotten.
Why it matters
The weakness class is CWE-77, command injection. A web form handler passes part of a request into a system command without neutralizing it. Embedded routers often run their web servers with high privileges, so a successful injection gives wide control.
The only reference is a public write up, and I did not rely on it for details. The record does not flag this CVE as listed in CISA's Known Exploited Vulnerabilities catalog.
Quick check
What if no patch ever arrives?
Limit exposure by blocking management access from untrusted networks, and plan to replace the device.
Sources
Last reviewed: 19 October 2026.
