# CVE-2026-79589: U-speed WIFI4 N300 (T1 Pro) missing authentication in UART interface

Source: https://junglewise.ai/threats/cve-2026-79589-the-wifi4-n300-router-model-t1-pro-v1-0-0-by-u-speed-contains-an  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-29. Updated: 2026-10-29  
License: CC BY 4.0 with a link back

CVE-2026-79589 · Severity: info · Published 2026-10-29

The U-speed WIFI4 N300 router (Model T1 Pro) provides an unauthenticated UART debug interface that exposes the device's root shell. An attacker with physical access can solder wires to exposed UART test pads to gain complete control over the router's filesystem and network functionality without any authentication required.

Vendors: [U-SPEED](https://junglewise.ai/threats/vendors/u-speed).

## Quick answers

**Is CVE-2026-79589 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-79589 being exploited in the wild.

**How severe is CVE-2026-79589?** Informational severity, published 29 October 2026.

**Which products and versions are affected?** U-SPEED WIFI4 N300 T1 Pro v1.0.0.

**Is there a fix for CVE-2026-79589?** No fixed version is recorded yet. Disable UART debug ports entirely or implement strong authentication mechanisms for the UART console access. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-79589 attacked?** It is attacked with physical access, in a network appliance.

**Am I affected by CVE-2026-79589?** Check whether you run U-SPEED WIFI4 N300 T1 Pro at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix


Disable UART debug ports entirely or implement strong authentication mechanisms for the UART console access.

## Technical details

The vulnerability is a missing authentication mechanism (CWE-306) on the UART debug interface operating at 38400 baud rate. Physical access and soldering capability are required to connect to the exposed UART test pads. Once connected, an attacker gains an unauthenticated root shell (UID 0) with full system privileges and filesystem access; no patch information is available.

## Affected products

- U-speed WIFI4 N300 (T1 Pro) v1.0.0

## Timeline

- 2026-10-29: disclosed

## References

- [https://github.com/milkinit/cve-disclosures/tree/main/IoT/CVE-2026-79589](https://github.com/milkinit/cve-disclosures/tree/main/IoT/CVE-2026-79589)
- [https://www.u-speed.com.cn/en/product_details?production=N300&production_miaoshu=1%E6%89%9816%E4%B8%BB%E5%85%89%E7%8C%AB%2C%E4%BC%81%E4%B8%9A%E5%85%A8%E5%85%89%E4%B8%A4%E5%8D%83%E5%85%86%E6%8E%A5%E5%85%A5](https://www.u-speed.com.cn/en/product_details?production=N300&production_miaoshu=1%E6%89%9816%E4%B8%BB%E5%85%89%E7%8C%AB%2C%E4%BC%81%E4%B8%9A%E5%85%A8%E5%85%89%E4%B8%A4%E5%8D%83%E5%85%86%E6%8E%A5%E5%85%A5)

## Related threats

- [U-speed WIFI4 N300 T1 Pro cleartext credential transmission](https://junglewise.ai/threats/cve-2026-79588-u-speed-wifi4-n300-t1-pro-cleartext-credential-transmission)