CVE-2026-75487

The Cudy TR3000 (versions before 2.5.42 ) is susceptible to a command injection vulnerability involving the WireGuard server private_key option. The root cause is that the action_wireguards_export() function passes the private key to luci.sys.exec during configuration export without proper saniti...