CVE-2026-79589
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
U-speed 生产的 WIFI4 N300 路由器（型号：T1 Pro，固件版本 v1.0.0）存在一个不安全的访问控制漏洞，允许攻击者在无需认证的情况下获取系统的 root shell。该漏洞源于 UART 调试接口被暴露，且该接口缺乏身份认证、授权和访问控制机制。一旦攻击者将该接口焊接并连接至设备，即可获得系统的 root 权限。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-79589
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2026-79589
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-79589
请登录查看更多情报信息。
Other References for CVE-2026-79589 (2)
Same Patch Batch · n/a · 2026-10-29 · 28 CVEs total
| CVE-2026-107027 | Tarnhelm v1.8.2 组件导出漏洞致数据被篡改 | |
| CVE-2026-107042 | USP Ultimate Screenshot Painter 240213.009 文件覆盖漏洞 | |
| CVE-2026-107037 | NoNonsense Notes 72600 组件权限漏洞 | |
| CVE-2026-107040 | MBasov OMN-Go 26080824 组件导出漏洞 | |
| CVE-2026-107038 | Yet Another UPnP Controller 50200 组件导出漏洞 | |
| CVE-2026-107041 | Oasis Feng Island 51801 FeatureActionActivity 权限漏洞致DoS | |
| CVE-2026-107036 | AIMSICD 2026080501 组件导出漏洞 | |
| CVE-2026-107039 | NetGuard 2.337 ActivityMain 组件权限不当导致重置或 DoS | |
| CVE-2026-107030 | craftxbox YubiClip v1.0.1 权限漏洞致 OTP 机制不同步 | |
| CVE-2026-107032 | Bulk Share:Location Sender v2.1.0 组件导出漏洞 | |
| CVE-2026-107035 | MBasov OMN Outline v3400 任意内容写入漏洞 | |
| CVE-2026-107034 | LeafPad/Note v1.21 权限不当漏洞 | |
| CVE-2026-107033 | Mirakel v3.0 组件权限漏洞致任务数据库可被篡改 | |
| CVE-2026-107029 | Pile v1.1.3 权限不当漏洞致数据任意读写 | |
| CVE-2026-107014 | Bander Notepad 12 权限配置不当导致跨用户读写 | |
| CVE-2026-107026 | Share to Clipboard v1.14.1 权限不当致剪贴板被篡改 | |
| CVE-2026-107028 | wbpxre150 Shopping List v11.0 组件导出漏洞 | |
| CVE-2026-107025 | WikiAndPad v0.2alpha03 权限漏洞致数据泄露 | |
| CVE-2026-107015 | Simple Contacts Pro 107 权限漏洞可读写他人笔记 | |
| CVE-2026-107024 | Share 2 Archive Today 61 任意覆盖剪贴板漏洞 |
Showing top 20 of 28 CVEs. View all on vendor page → →