CVE-2026-32833Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the cbid.system.ntp.current POST parameter in the system time configuration interface. Attackers can submit malicious payloads through the NTP settings endpoint to achieve remote code execution on the underlying system.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-06-27); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-27	2	Disclosure2
2026-08-10	1	Disclosure1

Full discourse3 posts

Joey Romaine 🇺🇸 |=★=|@Tank23x047d
Disclosure
CVE-2026-32833 is live. If you run affected systems, read this now. Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection vulnerability that allo... Stay ahead of the curve.
Post summary
The post announces CVE‑2026‑32833 as a live OS command injection flaw affecting Cudy LT300 firmware versions older than 2.5.12, but provides no PoC, exploit code, patch, or evidence of active exploitation.
0001060
357 followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-32833 Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary comman… https://www.cve.org/CVERecord?id=CVE-2026-32833 ----- Traducción: CVE-2026-32833 Cud… http://infoflow.cloud`
Post summary
The post announces a CVE-2026-32833 OS command injection in Cudy LT300 firmware versions prior to 2.5.12, enabling authenticated attackers to run arbitrary commands.
00010132
89 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-32833 Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary comman… https://www.cve.org/CVERecord?id=CVE-2026-32833
Post summary
The post discloses CVE‑2026‑32833, a command‑injection flaw in Cudy LT300 firmware versions before 2.5.12 that permits authenticated attackers to run arbitrary OS commands.
00000842
57.7K followersView on X

Explore more

Back to dashboard