CVE-2026-79589: Security vulnerability

Published Oct 29, 2026

Updated

The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system.

Event History

Oct 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:17 PM

Description

Frequently Asked Questions

Who is exposed to this issue?

Devices identified as the U-speed WIFI4 N300 router, model T1 Pro, version 1.0.0, are affected if an attacker can physically access the device and connect to its UART debugging interface.

What does an attacker need to exploit it?

The attacker needs physical access to the router, must solder and connect to the exposed UART interface, and can then obtain a root shell without authentication or authorization.

Does exploitation require network access or valid router credentials?

No network access or valid credentials are described as necessary. The reported attack path is direct physical access through the UART debugging interface.

CVE-2026-79589: Security vulnerability

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Does exploitation require network access or valid router credentials?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Does exploitation require network access or valid router credentials?