CVE-2026-38713

Multiple versions of TR1200, TR3000, WR300, WR1200, WR1300, WR1500, WR3000, WR3600, and WR6500 devices are vulnerable to a critical command injection flaw in the ipsec_conn interface, enabling attackers to execute arbitrary commands with root privileges through specially crafted input. Organizations using these affected products should prioritize immediate remediation to mitigate the risk of unauthorized access and potential system compromise. This vulnerability poses a significant threat to network security and requires urgent attention from system administrators and security teams.