CVE-2026-75578

Cudy TR3000 before 2.5.42 contains a command injection vulnerability in luci/model/cbi/vpn/openvpn/client.lua, which embeds the shellquote-quoted remote host token of an uploaded OpenVPN configuration inside an already single-quoted sed program run by os.execute, so the nested quotes terminate th...