CVE-2026-75494

The Cudy TR3000 (versions prior to 2.5.42 ) is vulnerable to an argument injection vulnerability in the easycwmpd Upload handler . A malicious or compromised ACS can inject curl options by providing unfiltered Username and Password values containing whitespace. This allows the attacker to append ...