Threats tagged 'ghsa-rhx2-8j4g-j7gx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.6	CVE-2026-75577Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators to High8.62026-11-13GCVE DatabaseCVE-2026-75577 Cudy TR3000 devices running firmware versions before 2.5.42 have a command injection vulnerability. Authenticated administrators can exploit this flaw by storing a malicious WireGuard private key containing shell substitution syntax. This key is then passed to a shell command via the vpn.export_conf method on the /cgi-bin/luci/rpc/app JSON-RPC endpoint, allowing execution of arbitrary commands as root. Report on CVE-2026-75577 Vulnerability CWE-78 #ghsa-rhx2-8j4g-j7gx	GCVE Database	2026-11-13

Page 1 of 1