CVE WATCH / VULNERABILITY DETAIL
CVE-2026-129102
HIGHCVSS 7.2NVD feed
Published 13 November 2026 · tracked since 14 November 2026
Description
Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators to execute commands as root by injecting newlines into the IPsec keyexchange field of the vpn.set_conf RPC method. Attackers can append a second leftupdown directive to ipsec.conf, which Str
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110199 MEDIUM 4.8
- CVE-2026-128128 HIGH 7.5
- CVE-2026-127217 MEDIUM 6.4
- CVE-2026-127216 MEDIUM 6.5
- CVE-2026-68905 HIGH 8.2
- CVE-2026-128089 HIGH 7.5
- CVE-2026-127215 HIGH 8.1
- CVE-2026-127214 HIGH 8.5
- CVE-2026-128088 LOW 2.2
- CVE-2026-128087 LOW 3.7