CVE-2026-75488

The Cudy TR3000 (versions before 2.5.42 ) is vulnerable to a stack buffer overflow within the CWMP client . A malicious ACS (Auto Configuration Server) can exploit this by sending Username and Password values up to 256 bytes during TR-069 Download or Upload requests. This causes an overflow of th...