CVE-2026-36960 Details

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Router, specifically in firmware version 1.0.0. The router's administrative API endpoints lack proper CSRF protection, such as anti-CSRF tokens or stringent Origin/Referer validation. This oversight allows attackers to create malicious webpages that send forged HTTP requests to configuration endpoints. If an authenticated administrator visits the compromised webpage, the router mistakenly processes the request as a legitimate administrative action, using the administrator's valid session cookie.

To address this vulnerability, U-SPEED should implement anti-CSRF tokens on all state-changing API endpoints and enforce strict validation of Origin and Referer headers. Additionally, the SameSite=Strict attribute should be applied to session cookies.