EUVD-2026-125264

Cudy TR3000 before 2.5.42 contains an unauthenticated stack buffer overflow vulnerability in the stunclient TR-111 UDP Connection Request parser that parses requests before verifying username or HMAC. Remote attackers can send a single crafted UDP datagram lacking a space in the request line,...