PT-2026-66856 · Wr1200+8 · Wr1200+8

CVE-2026-38713

·

Published

2026-07-31

·

Updated

2026-08-03

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TR1200 version 2.4.15 TR3000 version 2.4.21 WR300 version 2.4.25 WR1200 version 2.4.23 WR1300 version 2.4.22 WR1500 version 2.3.10 WR3000 version 2.4.19 WR3600 version 2.3.16 WR6500 version 2.3.15
Description A command injection issue exists in the ipsec conn interface. This allows an attacker to execute arbitrary commands with root privileges by providing a specially crafted input.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2026-38713

Affected Products

Tr1200
Tr3000
Wr1200
Wr1300
Wr1500
Wr300
Wr3000
Wdr3600
Wr6500