CVE-2026-71960

Critical

Description

Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting the secret from the firmware image. Attackers can use the extracted secret to craft arbitrary JWT tokens and authenticate to the MQTT broker without legitimate credentials, gaining unauthorized access to the device's mesh networking interface.

SeverityCritical

CVSS9.1

Exploit probability—

ProductWR3000 2.0

PublishedAug 19, 2026

First seenAug 19, 2026

Weakness typeCWE-798Hard-coded credentials

How to fix

Update

Shenzhen Cudy Technology Co., Ltd. WR3000 2.02.5.24 or later

Vendor advisories

cudy.com/en-us/pages/download-center/wr3000-2-0

Affected products

Product	Affected versions	Fixed in
Shenzhen Cudy Technology Co., Ltd. WR3000 2.0	v < 2.5.24	2.5.24
Shenzhen Cudy Technology Co., Ltd. P5 V1.1	2.4.25 ≤ v ≤ 2.4.27	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.