CVE-2026-75578

The Cudy TR3000 (versions before 2.5.42 ) is vulnerable to a command injection vulnerability in luci/model/cbi/vpn/openvpn/client.lua. The root cause is the improper handling of the remote host token from uploaded OpenVPN configuration files; the application embeds a shellquote()-quoted token int...

PT-2018-5950

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-workmode variable in the pptp client.lua file...

PT-2018-5935

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptp client.lua file...

PT-2018-5931

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-outif variable in the pptp client.lua file...

PT-2018-5947

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in the pptp client.lua file...

PT-2018-5932

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptp client.lua file...

PT-2018-5943

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-olmode variable in the pptp client.lua file...

PT-2018-5945

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-pns variable in the pptp client.lua file...

PT-2018-5949

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-remotesubnet variable in the pptp client.lua file...

PT-2018-5936

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptp client.lua fil...

PT-2018-5940

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptp client.lua...