c
cudy
Security Risk Profile
67
/100
highSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 17, 2023 to present
10
Total CVEs
4
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
67/100
high
🆕 2Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
1High
3Medium
4Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
XSS
4
2
Command Injection
3
3
OS Command Injection
2
4
Code Injection
1
Most Affected Products
1. Cudy Lt400 Firmware5
2. Cudy WR3000 2.01
3. Cudy WR30001
4. Mosquitto MQTT broker authentication plugin1
5. Cudy LT3001
Recent Vulnerabilities
See more →CVE-2026-71961
CVSS 8.8high
Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handler
Aug 19, 2026🔧 No Patch
CVE-2026-71960
CVSS 9.1critical
Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTT
Aug 19, 2026🔧 No Patch
CVE-2026-32833
CVSS 8.7high
Cudy LT300 3.0 OS Command Injection via NTP Configuration
Jun 26, 2026🔧 No Patch
CVE-2026-4537
CVSS 2.0EPSS 0%low
Cudy TR1200 ipsec.lua action_ipsec_conn command injection
Mar 22, 2026🔧 No Patch
CVE-2025-11134
CVSS 4.8medium
Cudy TR1200 Wireless Settings config cross site scripting
Sep 29, 2025🔧 No Patch
CVE-2025-9725
CVSS 8.8EPSS 0%high
Cudy LT500E Web shadow hard-coded password
Aug 31, 2025🔧 No Patch
CVE-2025-9589
CVSS 2.5EPSS 0%low
Cudy WR1200EA shadow default password
Aug 28, 2025🔧 No Patch
CVE-2023-31853
CVSS 6.1medium
Jul 17, 2023🔧 No Patch
CVE-2023-31852
CVSS 6.1medium
Jul 17, 2023🔧 No Patch
CVE-2023-31851
CVSS 6.1medium
Jul 17, 2023🔧 No Patch
Monitor cudy in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.