CVE-2026-75492

The Cudy TR3000 (versions before 2.5.42 ) is vulnerable to an unauthenticated stack buffer overflow in the stun_client TR-111 UDP Connection Request parser. The flaw exists because the parser processes requests before verifying the username or HMAC. A remote attacker can trigger the vulnerability...