U-speed vulnerabilities
We track 3 vulnerabilities in U-speed products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 13, 2026.
Latest U-speed vulnerabilities
- 7.2 High severity
T18-21k Firmware: Improper Neutralization of Special Elements used in a Command
U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection. The Network Time Protocol (NTP) configuration interface does not properly sanitize user-supplied input. An authenticated user with permission to configure NTP setting
- 7.5 High severity
N300 Firmware: Improper Restriction of Excessive Authentication Attempts
U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local network to perform unlimited authentication attempts, enabling brute-force attacks against the administr
- 7.5 High severity
N300 Firmware: Uncontrolled Resource Consumption
A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management interface, an attacker can exhaust system resources in the embe