CVE-2026-79589

INFO Priority: 0.00 BB Relevance: 0/100

Published: 2026-10-29 Modified: 2026-10-29 First seen: 2026-10-29 Status: pending_score

Description

The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system.

Affected Software (1)

Vendor	Product	Version
n/a	n/a	n/a

References & Advisories (2)

https://github.com/milkinit/cve-disclosures/tree/main/IoT/CVE-2026-79589

https://www.u-speed.com.cn/en/product_details?production=N300&production_miaoshu=1%E6%89%9816%E4%B8%BB%E5%85%89%E7%8C%AB%2C%E4%BC%81%E4%B8%9A%E5%85%A8%E5%85%89%E4%B8%A4%E5%8D%83%E5%85%86%E6%8E%A5%E5%85%A5

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

mitre ref →

nvd ref →

External Links

NVD (NIST) CVE Details FIRST EPSS API OSV.dev