Read the docs

Shenzhen Cudy Technology Co., Ltd.

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Shenzhen Cudy Technology Co., Ltd. records in CISA KEV

No Shenzhen Cudy Technology Co., Ltd. vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-50255 CVE-2026-71960 · GHSA-jw4g-pv34-hp37

Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTT

Priority MEDIUM 49

Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tok…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00534 Published 2026-08-19 Fixed in 2.5.24 CWE-798
TI-2026-50256 CVE-2026-71961 · GHSA-8jmp-g7g6-gf45

Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handler

Priority MEDIUM 45

Cudy WR3000 2.0 running firmware before 2.5.24 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary OS commands with root privileges by sending unsanitized input through…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02703 Published 2026-08-19 Fixed in 2.5.24 CWE-78
TI-2026-25297 CVE-2026-32833 · GHSA-wcjj-vwjf-qqvc

Cudy LT300 3.0 OS Command Injection via NTP Configuration

Priority MEDIUM 44

Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the cbid.sys…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02424 Published 2026-06-26 Fixed in 2.5.12 CWE-78
Open these records in search →