A buffer overflow vulnerability (CVE-2026-1137) was discovered in UTT 进取 520W router version 1.7.7-180627. The vulnerability affects the strcpy function in the /goform/formWebAuthGlobalConfig file. Attackers can exploit this remotely through manipulation of input parameters. The exploit code has been made publicly available, increasing the risk of active exploitation. The vendor was notified but has not responded to the disclosure.