Option Injection Vulnerability in Cudy TR3000 Router

CVE-2026-129105

What is CVE-2026-129105?

The Cudy TR3000 router prior to version 2.5.42 is susceptible to an option injection vulnerability. This flaw allows authenticated administrators to introduce arbitrary pppd options through quotes and newlines embedded in L2TP credentials. By exploiting this issue, attackers can leverage crafted usernames or passwords with the net.set_wan RPC method. As a result, malicious options like 'logfile' could be inserted into the pppd options file, impacting the root pppd process and potentially compromising network security.

References