Dashboard / CVE-2026-36958

CVE-2026-36958

HIGH 1 PoC
MEDIUM Priority: 0.02 BB Relevance: 85/100
Published: 2026-04-30 Modified: 2026-11-08 First seen: 2026-11-08 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: None
A: High

Description

A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management interface, an attacker can exhaust system resources in the embedded Boa HTTP server. This causes the router web interface to become unresponsive and may require manual reboot to restore normal operation.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
u-speed n300_firmware 1.0.0

References & Advisories (1)

https://github.com/kirubel-cve/CVE-2026-36958
Exploit Third Party Advisory

Proof of Concept (1)

—
https://github.com/kirubel-cve/CVE-2026-36958
nomi-sec

Bug Bounty Relevance

85 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction
✓ PoC available (1)

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.32%
Raw Score 0.003230
Percentile 25.7%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00323
2026-11-12
0.00323
2026-11-10
0.00323
2026-11-09
0.00323
2026-11-08
0.00323

Intelligence Sources

nvd ref →

External Links