CVE-2026-75490

The Cudy TR3000 router, running firmware versions prior to 2.5.42 , is susceptible to an unauthenticated remote code execution (RCE) vulnerability. An attacker on the upstream Ethernet segment can advertise rogue _cudycmagent._tcp records via mDNS to point to a malicious MQTT broker. By sending c...