wr3000_2.0 vulnerabilities

CVEs whose affected-version data names the wr3000_2.0 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-71960Critical· 9.1PoC

1mo ago

Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting…

Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting…

▾ AbyssalShenzhen Cudy Technology Co., Ltd. · WR3000 2.0EPSS 0.54%via NVD