CVE-2026-79588: n/a
Description
The U-speed WIFI4 N300 T1 Pro v1.0.0 device transmits administration credentials in cleartext over HTTP, exposing them to interception. This vulnerability allows an attacker with network access to potentially capture these credentials. The issue is classified as medium severity with a CVSS score of 4.3. No patch or remediation information is currently available.
CVSS v3.1
Score 4.3medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-79588 identifies a vulnerability in U-speed WIFI4 N300 T1 Pro version 1.0.0 where administration credentials are transmitted in cleartext over HTTP. This cleartext transmission (CWE-319) can be intercepted by an attacker with access to the network, potentially compromising administrative access. The CVSS v3.1 score is 4.3, reflecting low complexity and no required privileges or user interaction for an attacker to exploit this vulnerability remotely over the network.
Potential Impact
The vulnerability allows an attacker with network access to intercept administrative credentials due to their transmission in cleartext. This could lead to unauthorized administrative access to the device. However, the impact is limited to confidentiality as integrity and availability are not affected.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, it is recommended to avoid using HTTP for administration or restrict access to trusted networks only.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-08-25T00:00:00.000Z
- State
- PUBLISHED
Threat ID: 6aa07231acd9273b4931f6ae
Added to database: 09/08/2026, 20:38:09 UTC
Last enriched: 09/16/2026, 02:24:06 UTC
Last updated: 10/23/2026, 15:10:15 UTC
Views: 58
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.