CVE-2026-36738 - U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control

Back Back to CVE browser

MEDIUM

U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control

Published May 13, 2026

6.8

MEDIUM

CVSS 3.1

EPSS 0.33%

Description

U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control. The device exposes a UART interface that lacks authentication, authorization, or access control mechanisms. An attacker with physical access to the UART pins can connect to the interface and gain unrestricted access to device functionality.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (2)

https://github.com/N0tMilk/vulnerability-research
Third Party Advisory
https://github.com/N0tMilk/vulnerability-research/tree/main/IoT/CVE-2026-36738
exploitThird Party Advisory

Link	Providers	Tags
https://github.com/N0tMilk/vulnerability-research		Third Party Advisory
https://github.com/N0tMilk/vulnerability-research/tree/main/IoT/CVE-2026-36738		exploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 13, 2026

Updated May 14, 2026

Reserved Apr 6, 2026

Link CVE-2026-36738

CISA Vulnrichment

Updated May 14, 2026

NVD

Status Analyzed

Modified Jun 30, 2026

Link CVE-2026-36738

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-36738