Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Shenzhen Cudy Technology WR3000 2.0 2.5.24 Clear all filters
TI-2026-50256 CVE-2026-71961 · GHSA-8jmp-g7g6-gf45

Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handler

Priority MEDIUM 45

Cudy WR3000 2.0 running firmware before 2.5.24 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary OS commands with root privileges by sending unsanitized input through…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02703 Published 2026-08-19 Fixed in 2.5.24 CWE-78
TI-2026-50255 CVE-2026-71960 · GHSA-jw4g-pv34-hp37

Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTT

Priority MEDIUM 49

Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tok…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00534 Published 2026-08-19 Fixed in 2.5.24 CWE-798