What is the CVSS score of EUVD-2026-74263?

EUVD-2026-74263 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.1%.

U-speed WIFI4 N300 EUVD-2026-74263

| CVE-2026-79588 MEDIUM

Cleartext Transmission of Sensitive Information (CWE-319)

2026-09-08 cve@mitre.org

GHSA-wmqx-pqxm-c42c

Information Disclosure

4.3

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

4.3 MEDIUM

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

6.5 MEDIUM

Admin credential exposure yields high confidentiality impact; adjacency (AV:A) and no-auth (PR:N) match passive WiFi/LAN sniffing without interaction.

3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Sep 09, 2026 - 21:45 vuln.today

CVSS changed

Sep 09, 2026 - 19:22 NVD

4.3 (MEDIUM)

CVE Published

Sep 08, 2026 - 21:18 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP.

AnalysisAI

Cleartext transmission of administration credentials over HTTP in U-speed WIFI4 N300 T1 Pro v1.0.0 exposes router admin passwords to passive eavesdroppers on the same network segment. Any attacker with adjacent network access - including a co-located wireless client - can capture HTTP session traffic containing unencrypted credentials without any authentication or interaction. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Adjacent network access is required - the attacker must be on the same LAN segment or within wireless range of the device. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The provided CVSS 4.3 (AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) reflects the direct disclosure impact but understates the downstream consequence: capturing router admin credentials on a cleartext channel hands an attacker full administrative control of the device, enabling DNS hijacking, traffic interception, firewall rule modification, and persistent backdoors. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	No vendor-released patch has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.