Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Shenzhen Cudy Technology Co., Ltd. Clear all filters
TI-2026-50256 CVE-2026-71961 · GHSA-8jmp-g7g6-gf45

Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handler

Priority MEDIUM 45

Cudy WR3000 2.0 running firmware before 2.5.24 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary OS commands with root privileges by sending unsanitized input through…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02703 Published 2026-08-19 Fixed in 2.5.24 CWE-78
TI-2026-50255 CVE-2026-71960 · GHSA-jw4g-pv34-hp37

Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTT

Priority MEDIUM 49

Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tok…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00534 Published 2026-08-19 Fixed in 2.5.24 CWE-798
TI-2026-25297 CVE-2026-32833 · GHSA-wcjj-vwjf-qqvc

Cudy LT300 3.0 OS Command Injection via NTP Configuration

Priority MEDIUM 44

Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the cbid.sys…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02424 Published 2026-06-26 Fixed in 2.5.12 CWE-78