A buffer overflow vulnerability (CVE-2026-0841) was discovered in UTT 进取 520W version 1.7.7-180627. The vulnerability affects the strcpy function in /goform/formPictureUrl file through manipulation of the importpictureurl argument. The flaw can be exploited remotely and public exploits are available. The vendor was contacted but did not respond to disclosure attempts. This represents a high-risk security issue due to remote exploitability and public exploit availability.