CVE-2026-36741: n/a
U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection. The Network Time Protocol (NTP) configuration interface does not properly sanitize user-supplied input. An authenticated user with permission to configure NTP settings can inject arbitrary system commands through crafted input fields. These commands are executed with elevated privileges, leading to potential full system compromise.
AI Analysis
Technical Summary
CVE-2026-36741 describes a command injection vulnerability in the NTP configuration interface of the U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0. The interface fails to properly sanitize user-supplied input, enabling an authenticated user with NTP configuration permissions to execute arbitrary system commands with elevated privileges. This flaw could lead to full system compromise. The vulnerability is specific to the router's firmware and requires authentication. No patch or official remediation guidance is currently available.
Potential Impact
Successful exploitation allows an authenticated user to execute arbitrary commands with elevated privileges on the affected router, potentially resulting in full system compromise. This could undermine the device's integrity, confidentiality, and availability. No known exploits have been reported in the wild to date.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the NTP configuration interface to trusted administrators only and monitor for unauthorized changes. Avoid granting unnecessary permissions to users for NTP configuration.
CVE-2026-36741: n/a
Description
U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection. The Network Time Protocol (NTP) configuration interface does not properly sanitize user-supplied input. An authenticated user with permission to configure NTP settings can inject arbitrary system commands through crafted input fields. These commands are executed with elevated privileges, leading to potential full system compromise.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-36741 describes a command injection vulnerability in the NTP configuration interface of the U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0. The interface fails to properly sanitize user-supplied input, enabling an authenticated user with NTP configuration permissions to execute arbitrary system commands with elevated privileges. This flaw could lead to full system compromise. The vulnerability is specific to the router's firmware and requires authentication. No patch or official remediation guidance is currently available.
Potential Impact
Successful exploitation allows an authenticated user to execute arbitrary commands with elevated privileges on the affected router, potentially resulting in full system compromise. This could undermine the device's integrity, confidentiality, and availability. No known exploits have been reported in the wild to date.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the NTP configuration interface to trusted administrators only and monitor for unauthorized changes. Avoid granting unnecessary permissions to users for NTP configuration.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-04-06T00:00:00.000Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a04a508cbff5d8610e80448
Added to database: 5/13/2026, 4:21:28 PM
Last enriched: 5/13/2026, 4:37:02 PM
Last updated: 5/14/2026, 6:52:28 AM
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.