A critical command injection vulnerability in multiple Cudy router models allows unauthenticated remote attackers to execute arbitrary system commands with root-level privileges.

The vulnerability exists in the system.upgrade_check interface. It allows an unauthenticated attacker to inject and execute arbitrary commands with root privileges via crafted input.

This vulnerability represents a total compromise of the affected network infrastructure. Because the exploit grants root-level access, an attacker could intercept network traffic, pivot into internal segments, or establish persistent backdoors. The CVSS score of 9.8 underscores the extreme danger posed by this remote, unauthenticated execution flaw.

Immediate Action: Visit the official Cudy Security Advisory SA-26-7-7-KJW-1-B to identify and apply the necessary firmware updates for your specific router model.

Proactive Monitoring: Monitor network traffic for unusual outbound connections or diagnostic requests originating from the router management interface.

Compensating Controls: Restrict access to the router management interface to trusted internal IP addresses only, and disable remote management features until firmware can be patched.

Public Exploit Available: Unknown

This is a critical infrastructure vulnerability that requires immediate attention. Organizations must verify their router firmware versions against the vendor advisory and perform the necessary upgrades to eliminate the risk of remote system takeovers.