{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2026-79589", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-10-29T14:02:04.041Z", "dateReserved": "2026-08-25T00:00:00.000Z", "datePublished": "2026-10-29T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-10-29T14:02:04.041Z"}, "descriptions": [{"lang": "en", "value": "The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://www.u-speed.com.cn/en/product_details?production=N300&production_miaoshu=1%E6%89%9816%E4%B8%BB%E5%85%89%E7%8C%AB%2C%E4%BC%81%E4%B8%9A%E5%85%A8%E5%85%89%E4%B8%A4%E5%8D%83%E5%85%86%E6%8E%A5%E5%85%A5"}, {"url": "https://github.com/milkinit/cve-disclosures/tree/main/IoT/CVE-2026-79589"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}}, "dataVersion": "5.2"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "[email protected]"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system."}], "id": "CVE-2026-79589", "lastModified": "2026-10-29T16:21:34.310", "metrics": {}, "published": "2026-10-29T14:17:59.487", "references": [{"source": "[email protected]", "url": "https://github.com/milkinit/cve-disclosures/tree/main/IoT/CVE-2026-79589"}, {"source": "[email protected]", "url": "https://www.u-speed.com.cn/en/product_details?production=N300&production_miaoshu=1%E6%89%9816%E4%B8%BB%E5%85%89%E7%8C%AB%2C%E4%BC%81%E4%B8%9A%E5%85%A8%E5%85%89%E4%B8%A4%E5%8D%83%E5%85%86%E6%8E%A5%E5%85%A5"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Deferred"}

{}

{"created": "2026-10-29T16:30:14.693522+00:00", "title": "Insecure UART Debug Interface Allows Unauthenticated Root Shell in U-speed WiFi4 N300 Router", "updated": "2026-10-29T16:30:14.693531+00:00", "vendors": [], "weaknesses": ["CWE-284"]}