What is the CVSS score of CVE-2026-36958?

CVE-2026-36958 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of U-SPEED N300 are affected by CVE-2026-36958?

The U-SPEED N300 V1.0.0 wireless router is vulnerable to remote denial-of-service attacks that can crash its web management interface, rendering administrative access unavailable until manual…

How to fix or mitigate CVE-2026-36958?

Within 24 hours: Inventory all U-SPEED N300 V1.0.0 devices in production and document their network locations and criticality. Within 7 days: Contact U-SPEED vendor for patch availability and interim mitigation guidance; implement rate-limiting on the management interface through network segmentation if available. Within 30 days: Apply vendor-released patch immediately upon availability or replace affected devices with patched alternatives; restrict web management interface access to trusted administrative networks only.

U-SPEED N300 CVE-2026-36958

EUVD-2026-26379 HIGH

Uncontrolled Resource Consumption (CWE-400)

2026-04-30 mitre

Denial Of Service N A

7.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Apr 30, 2026 - 17:45 vuln.today

CVSS changed

Apr 30, 2026 - 16:22 NVD

7.5 (None) 7.5 (HIGH)

EUVD ID Assigned

Apr 30, 2026 - 15:00 euvd

EUVD-2026-26379

Analysis Generated

Apr 30, 2026 - 15:00 vuln.today

CVE Published

Apr 30, 2026 - 00:00 nvd

HIGH 7.5

DescriptionCVE.org

A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management interface, an attacker can exhaust system resources in the embedded Boa HTTP server. This causes the router web interface to become unresponsive and may require manual reboot to restore normal operation.

AnalysisAI

Remote unauthenticated attackers can crash the U-SPEED N300 V1.0.0 wireless router by flooding its web management interface with concurrent HTTP requests to random or non-existent endpoints, exhausting resources in the embedded Boa HTTP server until manual reboot is required. SSVC framework confirms proof-of-concept exploit code exists and the attack is fully automatable. CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates this is trivially exploitable from the internet without authentication, though impact is limited to availability disruption with no data compromise.

Technical ContextAI

This vulnerability affects the embedded Boa HTTP server implementation used in the U-SPEED N300 V1.0.0 wireless router's web management interface. The root cause is CWE-400 (Uncontrolled Resource Consumption), a classic resource exhaustion flaw where the HTTP server lacks proper request rate limiting, connection throttling, or resource allocation controls. When bombarded with concurrent requests to invalid URIs, the embedded web server exhausts available memory, file descriptors, or processing threads until it becomes unresponsive. Boa is a lightweight single-threaded HTTP server commonly used in embedded devices and IoT products due to its small footprint, but this efficiency comes at the cost of limited built-in protections against resource exhaustion attacks. The CPE data from NVD is incomplete (cpe:2.3:a:n/a:n/a), indicating potential gaps in vulnerability tracking databases for this vendor's products.

RemediationAI

No vendor-released patch has been identified in the available data - the primary vendor reference (http://u-speed.com) is a domain reference rather than a security advisory. Users should immediately check u-speed.com for firmware updates addressing CVE-2026-36958 and upgrade to any version newer than V1.0.0 if available. As a critical compensating control, restrict access to the router's web management interface to trusted internal networks only by disabling WAN-side administrative access in the router configuration (typically under Remote Management or WAN Access settings). Configure firewall rules to block external access to TCP ports 80 and 443 destined for the router's WAN IP address. If remote administration is absolutely required, implement VPN-based access rather than direct internet exposure, though this adds complexity and potential VPN-related vulnerabilities. Note that disabling WAN management may complicate remote troubleshooting for non-technical users. The GitHub reference (https://github.com/kirubel-cve/CVE-2026-36958) may contain proof-of-concept code useful for validation testing in isolated lab environments but should not be used against production systems without authorization.