CVE-2026-79589 — Vulnerability intelligence

—

Published: 2026-10-29T00:00:00.000Z

CVSS

9.8

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system.

Sources

• CVE-2026-79589
• Original advisory
• Original advisory
• CVE-2026-79589