CVE-2026-75576

The Cudy TR3000 (versions before 2.5.42 ) is vulnerable to a command injection flaw within the CBI FileUpload handler . This vulnerability occurs because the application fails to validate multipart filenames during the VPN configuration upload process. An authenticated administrator can execute a...