CVE-2025-70998 Hardcoded credentials in n/a

Critical 9.8 Published 18 Feb 2026 Updated 18 Feb 2026

Remote attackers can gain root access to UTT HiPER routers via insecure default telnet credentials, requiring immediate credential changes.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-70998?

CVE-2025-70998 is a critical vulnerability in n/a, published on 18 Feb 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

UTT HiPER 810 / nv810v4 router firmware v1.5.0-140603 was discovered to contain insecure default credentials for the telnet service, possibly allowing a remote attacker to gain root access via a crafted script.

Weakness: CWE-1188

Which versions are affected by CVE-2025-70998?

It affects 1 product.

Products include Utt 810 Firmware.

How do I fix CVE-2025-70998?

No fix has been published for CVE-2025-70998 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-70998 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-70998 exists.

Sources

Also known as GHSA-fqrv-m9rv-j33j.