CVE-2026-79589

Description

The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system.

Is your site exposed to CVE-2026-79589?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0035

Probability of exploitation

0.29%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://github.com/milkinit/cve-disclosures/tree/main/IoT/CVE-2026-79589 https://www.u-speed.com.cn/en/product_details?production=N300&production_miaoshu=1%E6%89%9816%E4%B8%BB%E5%85%89%E7%8C%AB%2C%E4%BC%81%E4%B8%9A%E5%85%A8%E5%85%89%E4%B8%A4%E5%8D%83%E5%85%86%E6%8E%A5%E5%85%A5

Frequently Asked Questions

What is CVE-2026-79589? +

The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system.

How do I check if I'm vulnerable to CVE-2026-79589? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.