Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control functionality. Once the interface is soldered and connected to the attacker, they gain root privilege to the system.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🔴 Newly rated critical, disclosed Oct 29 admin takeover via unauthenticated debug port (CVE-2026-79589) An attacker with physical access can use an exposed debug port, without a password, to take full admin control. No patch listed yet https://cve.now/CVE-2026-79589?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical