Posts tagged

CWE-798

Aug 20, 2026 HB

The Same Key Opens Every Box: CVE-2026-71960 — Hard-coded JWT Secret in Cudy's WR3000 Mesh MQTT Broker

A Wi-Fi 6 mesh router that authenticates its own mesh protocol with JWTs signed by a single HMAC key baked into the firmware image. Download the firmware, decrypt the NVRAM blob with a key hiding in a shared library, forge a token, and the broker on port 1883 welcomes you as the…

Vulnerability Hardware Router JWT MQTT CWE-798 Cudy

Tags

Account-Takeover Agentic-AI android Android Android-Adb Android-apktool Android-Avd Android-Studio Anti-Bot Authentication Automotive Backslash-Breakout Baseband Buffer-Overflow C2 CAN-Bus Chrome Command-Injection Container-Escape Cross-Site-Scripting Cudy CWE-121 CWE-122 CWE-125 CWE-1333 CWE-23 CWE-288 CWE-290 CWE-798 CWE-862 CWE-89 CWE-926 CWE-94 Data-Scraping Denial-of-Service Elixir Embedded-Systems Exploit Frida Geolocation GooglePlay Hardware Heap-Overflow Hi-Browser html-sanitize-ex HTTP2 Hugging-Face Identity-Confusion Information Security Integer-Overflow IoT JNI JWT Lexer-Differential Linux Linux-Kernel llama-cpp LLaMA-Factory LLM LwM2M MCP MediaTek Memory Disclosure MindsDB Missing-Authorization mitmproxy Mobile-Security MQTT Network-Analysis Networking OAuth OAuth2 OBD2 OIDC OpenID-Connect Out-of-Bounds Page-Cache Path-Traversal Penetration Testing pgAdmin PHP Playwright PostgreSQL Privilege-Escalation Prompt-Injection Python Race-Condition RCE ReDoS Reverse Engineering Reverse-Engineering Router Samsung-Bixby Samsung-Exynos Security Security-Research Session Hijacking SiYuan SMS Snapchat SNMP SQL-Injection SSL-Pinning STIG-Manager Supply-Chain TECNO Tenda Traefik Vulnerability Web Applications Web-Crawling Web-Security WebGPU Wi-Fi Zephyr Zero-Day