Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-129099

Cudy TR3000 before 2.5.42 Root RCE via OpenVPN Configuration Import

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrators to run root commands by importing a malicious OpenVPN client configuration. Attackers can include tls-verify or ipchange directives, which the incomplete denylist does not filter, to execute commands as root when the router connects to an attacker-controlled VPN endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Shenzhen Cudy Technology Co., Ltd. TR3000 1.0

Default version status: unaffected

  • 0 to < 2.5.42affected
  • 2.5.42unaffected

References