CVE-2026-38711 | Cudy WR6500 up to 2.4.25 Upgrade Interface command injection

July 31, 2026 Yanac

A vulnerability identified as very critical has been detected in Cudy TR1200, TR3000, WR1200, WR1300, WR1500, WR300, WR3000, WR3600 and WR6500 up to 2.4.25. This vulnerability affects unknown code of the component Upgrade Interface. This manipulation causes command injection.

This vulnerability is registered as CVE-2026-38711. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More