4 matches found
CVE-2026-129099
Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrators to run root commands by importing a malicious OpenVPN client configuration. Attackers can include tls-verify or ipchange directives, which the incomplete denylist does not filter, to...
CVE-2026-129099 Cudy TR3000 before 2.5.42 Root RCE via OpenVPN Configuration Import
Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrators to run root commands by importing a malicious OpenVPN client configuration. Attackers can include tls-verify or ipchange directives, which the incomplete denylist does not filter, to...
CVE-2026-129099
The Cudy TR3000 router, running firmware versions before 2.5.42 , is vulnerable to a remote code execution (RCE) flaw. The issue stems from an incomplete denylist that fails to filter specific OpenVPN client configuration directives, such as tls-verify or ipchange. An authenticated administrator ...
EUVD-2026-125450
Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrators to run root commands by importing a malicious OpenVPN client configuration. Attackers can include tls-verify or ipchange directives, which the incomplete denylist does not filter, to...