Cudy WR3000: Hard-coded JWT Secret to Root Command Injection

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-08-20 06:24 UTC
Importiert: 2026-08-20 07:43 UTC
CVSS: 9.3
Quelle-ID: full_disc
uid_hash: fd3a4607b326fc818e7d8dc46fb57b507f89295af5e7d523ae1fc2bdaf65cbea

Full Disclosure

Posted by Nir Yehoshua on Aug 19 Hello Full Disclosure list,

Cipher Security Labs has published details for two vulnerabilities

affecting Cudy WR3000 hardware revision 2.0 running firmware before

version 2.5.24.

CVE-2026-71960 - Hard-coded JWT Secret Authentication Bypass

Severity: Critical, CVSS 9.3

The device firmware contains a hard-coded HMAC signing secret used by

the Mosquitto MQTT JWT authentication plugin. Because the secret can

be recovered from the firmware image,...

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-71960	CRITICAL	9.3	CRITICAL	9.3			2026-08-19

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss