CVE-2026-4537Disclosure

LOWCVSS 2.0 · LOW

Signal is active with 5 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in Cudy TR1200 R46-2.4.15-20250721-164017. Impacted is the function action_ipsec_conn of the file /usr/bin/lib/lua/luci/controller/ipsec.lua. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. Upgrading the affected component is advised. The vendor explains, that "some other customer has reported this to us before. And we have fixed this."

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-77

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 5 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 5 classified signals
  • 5 total mentions across 1 day

Deep dive

Activity timeline5 mentions / 1d
01345Mentions · 2026-03-22: 5Technical Details · 2026-03-22: 303-22
Signal classification1 categories
Disclosure
5100.0%
Referenced assets5 URLs
Full discourse5 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-4537 Command Injection Vulnerability in Cudy TR1200 Router Firmware R46-2.4.15 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4537

    Post summary

    This brief note announces a command injection vulnerability in the Cudy TR1200 router firmware and links to a vulnerability details page.

    0002046
    4.0K followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-4537 📊 Severity: 4.7 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4537 #CVE-2026-4537 #CVE #Medium  #CyberSecurity #InfoSec https://t.co/N3nVKKP2li

    Post summary

    The tweet announces CVE-2026-4537, noting its severity and risk level, with reference to the NVD, but provides no further technical, exploit, or mitigation details.

    0000019
    111 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-4537 A vulnerability was determined in Cudy TR1200 R46-2.4.15-20250721-164017. Impacted is the function action_ipsec_conn of the file /usr/bin/lib/lua/luci/controller/ipsec.… https://www.cve.org/CVERecord?id=CVE-2026-4537

    Post summary

    The post announces the discovery of CVE-2026‑4537 affecting the `action_ipsec_conn` function in a specific Cudy firmware build, without providing evidence of exploitation, a PoC, patch, or mitigation.

    00000101
    56.8K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4537 - Cudy TR1200 ipsec.lua action_ipsec_conn command injection Intel Report: https://ift.tt/xfnuBHU

    Post summary

    A new command‑injection vulnerability (CVE‑2026‑4537) affecting Cudy TR1200’s ipsec.lua has been identified and reported via an Intel link.

    0000021
    291 followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4537 - Cudy TR1200 ipsec.lua action_ipsec_conn command injection Intel Report: https://ift.tt/fZJowF1

    Post summary

    An alert identifies CVE‑2026‑4537 as a command injection flaw in Cudy TR1200’s ipsec.lua, providing only the vulnerability type without evidence of exploitation or mitigation.

    0000021
    291 followersView on X

Explore more