CVEvulnerability
CVE-2026-36738
6.8 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-05-13
- Last modified
- 2026-06-30
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-284
Description
U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control. The device exposes a UART interface that lacks authentication, authorization, or access control mechanisms. An attacker with physical access to the UART pins can connect to the interface and gain unrestricted access to device functionality.
Affected configurations
• u-speed t18-21k firmware 1.0
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://github.com/N0tMilk/vulnerability-research Third Party Advisory
- https://github.com/N0tMilk/vulnerability-research/tree/main/IoT/CVE-2026-36738 Exploit, Third Party Advisory
- https://github.com/N0tMilk/vulnerability-research/tree/main/IoT/CVE-2026-36738 Exploit, Third Party Advisory