6.8

CVE-2026-36738

Exploit
U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control. The device exposes a UART interface that lacks authentication, authorization, or access control mechanisms. An attacker with physical access to the UART pins can connect to the interface and gain unrestricted access to device functionality.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
U-speed ≫ T18-21k Firmware Version1.0
   U-speed ≫ T18-21k Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.3% 0.216
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 6.8 0.9 5.9
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://github.com/N0tMilk/vulnerability-research
Third Party Advisory
https://github.com/N0tMilk/vulnerability-research/tree/main/IoT/CVE-2026-36738
Third Party Advisory
Exploit