CVE-2026-38708

Multiple versions of TR1200, TR3000, WR300, WR1200, WR1300, WR1500, WR3000, WR3600, and WR6500 devices are vulnerable to a critical command injection flaw in the system.setclock interface, enabling attackers to execute arbitrary commands with root privileges through specially crafted input. Organizations using these affected products should prioritize immediate remediation to mitigate the risk of unauthorized access and potential system compromise. This vulnerability poses a significant threat to network security and should be addressed urgently by system administrators and security teams.