CVE-2026-79589
The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw…
- Risk score
- 65/100
- CVSS
- 9.8 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 29 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed has an insecure access control flaw, allowing an attacker to gain an unauthenticated root shell. This flaw is caused by the exposure of the UART debugging interface without authentication, authorization, or access control.
- Affected
- {'products': ['WIFI4 N300 router (Model: T1 Pro)'], 'packages': [], 'versions': ['v1.0.0']}
- Fix
- Check the linked advisory for details on the fix.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system.
Last activity 29 Oct 2026. Patch Forecast updates every hour.