Threats tagged 'ghsa-jx36-j77w-8qrq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.6	CVE-2026-129101Cudy TR3000 before 2.5.42 contains a mass assignment vulnerability in the vpn.set_conf App RPC method that allows High8.62026-11-13GCVE DatabaseCVE-2026-129101 Cudy TR3000 devices running firmware versions before 2.5.42 have a mass assignment vulnerability in the vpn.set_conf App RPC method. This flaw allows authenticated administrators to inject arbitrary OpenVPN server options. Specifically, attackers can enable the VPN and set a malicious 'up' option that is executed by the openvpn-hotplug wrapper with root privileges via /bin/sh. Report on CVE-2026-129101 Vulnerability CWE-915 #ghsa-jx36-j77w-8qrq	GCVE Database	2026-11-13

Page 1 of 1