CVE-2026-79588: U-speed WIFI4 N300 T1 Pro vulnerability
U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP.
Affected Software
Event History
Frequently Asked Questions
What conditions are required for an attacker to obtain the administration credentials?
An attacker would need the ability to observe HTTP traffic carrying the device's administration credentials. The available data does not specify the network position or access level needed to capture that traffic.
How can administrators determine whether their device is affected?
The affected product and version identified in the available data are U-speed WIFI4 N300 T1 Pro v1.0.0. Administrators can verify the device model and installed firmware version, and check whether administration credentials are transmitted over HTTP.
What can be done if an update is not immediately available?
Limit access to the device's administrative interface and avoid using it over networks where HTTP traffic could be observed. The available data does not identify a vendor patch or a configuration change that enables encrypted credential transmission.