N300 Firmware vulnerabilities

2 known vulnerabilities in N300 Firmware from U-speed. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  N300 Firmware: Improper Restriction of Excessive Authentication Attempts

  CVE-2026-36959Apr 30, 2026U-speed

  U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local network to perform unlimited authentication attempts, enabling brute-force attacks against the administr

• 7.5 High severity

  N300 Firmware: Uncontrolled Resource Consumption

  CVE-2026-36958Apr 30, 2026U-speed

  A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management interface, an attacker can exhaust system resources in the embe