CRITICAL 9.3 NVD
CVE-2026-71960
Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin
Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting the secret from the firmware image. Attackers can use the extracted secret to craft arbitrary JWT tokens and authenticate to the MQTT broker without legitimate credentials, gaining unauthorized access to the device's mesh networking interface.
References
- https://www.cudy.com/en-us/pages/download-center/wr3000-2-0
- https://www.vulncheck.com/advisories/cudy-wr3000-hard-coded-jwt-secret-authentication-bypa
This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-08-19 via NVD.
Risk Timeline
CVE Disclosed2026-08-19 · 0 days ago
Remediation Resources
Analysis & PoC
www.cudy.com/en-us/pages/download-center/wr3000-2-0
vulnfeed aggregates 11644 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.