CVE-2026-75491

Cudy TR3000 before 2.5.42 contains an authentication bypass vulnerability in the Mosquitto plugin authpluginjwt.so that accepts unsigned JWTs using alg none. Attackers holding any Cudy-trusted client certificate can authenticate as admincudydevice on port 8883 and publish batchcmd requests to...