CVE-2026-4537CWE-74CWE-77

Cudy TR1200 ipsec.lua action_ipsec_conn command injection

Medium · published March 22, 2026

CVSS v4.0
5.1
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

A vulnerability was determined in Cudy TR1200 R46-2.4.15-20250721-164017. Impacted is the function action_ipsec_conn of the file /usr/bin/lib/lua/luci/controller/ipsec.lua. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. Upgrading the affected component is advised. The vendor explains, that "some other customer has reported this to us before. And we have fixed this."

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.02207 · 82.4th percentile
Weaknesses
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'); CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2026-03-22T04:02Z
EPSS history
Timeline
  • 22 MAR 04:02Z
    Cudy TR1200 ipsec.lua action_ipsec_conn command injection
    cvelistv5