CVE-2026-36959

HighCVSS 7.5

Published: 30/04/2026(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

Summary

The U-SPEED N300 router version V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local network to perform unlimited authentication attempts, enabling brute-force attacks against the administrator account and potential unauthorized access to the router management interface.

Risk Assessment

The risk is that an attacker on the local network could gain control of the router, leading to network compromise, traffic interception, or further attacks on devices within the network.

Recommendation

Immediately update the router firmware to the latest version that implements rate limiting and account lockout. If no update is available, consider restricting management interface access to trusted IP addresses or applying additional network security measures.

Other vulnerabilities in U-SPEED N300 router

CVE-2026-36960High
The web management interface of the U-SPEED N300 Router V1.0.0 lacks CSRF protection mechanisms like anti-CSRF tokens or strict Origin/Referer validation. An attacker can craft a malicious webpage that sends forged HTTP requests to configuration endpoints. If an authenticated administrator visits the page, the browser includes the valid session cookie, allowing unauthorized administrative actions.

Original NVD description (English source)

U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local network to perform unlimited authentication attempts, enabling brute-force attacks against the administrator account and potential unauthorized access to the router management interface.