CVE-2026-79589
NONE—CVSS v3
—CVSS v2
—
EPSS (exploit probability)
—CWE
Description
The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system.
Affected routers (0)
No routers currently mapped to this CVE in our database.