Skip to content

CVE record · 1 source

CVE-2026-75491

CVSS 8.1

Cudy TR3000 before 2.5.42 contains an authentication bypass vulnerability in the Mosquitto plugin auth_plugin_jwt.so that accepts unsigned JWTs using…

Vendor: Shenzhen Cudy Technology Co., Ltd.
Product: TR3000 1.0
CVSS v3.1: 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-347
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

30

CVE NVD 22h ago

Cudy TR3000 before 2.5.42 contains an authentication bypass vulnerability in the Mosquitto plugin auth_plugin_jwt.so that accepts unsigned JWTs using…

Cudy TR3000 before 2.5.42 contains an authentication bypass vulnerability in the Mosquitto plugin auth_plugin_jwt.so that accepts unsigned JWTs using alg none. Attackers holding any Cudy-trusted client certificate can…

CVSS 8.1 CVE-2026-75491 Shenzhen Cudy Technology Co., Ltd.