CVE-2026-75495

The Cudy TR3000 (versions before 2.5.42 ) is vulnerable to an OS command injection vulnerability via the TR-098 User Password Parameter . A malicious or compromised ACS can send a SetParameterValues request containing shell metacharacters in the InternetGatewayDevice.User.{i}.Password value. Thes...