GL.iNet

Records93All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high33CVSS 7.0–8.9

Exploited now

GL.iNet records in CISA KEV

No GL.iNet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ar300m16 Firmware 17 records HIGH Gl-ax1800 Firmware 16 records HIGH Gl-ar300m Firmware 15 records HIGH Ax1800 Firmware 14 records HIGH Gl-ar750s Firmware 14 records HIGH Gl-axt1800 Firmware 13 records HIGH Gl-mt3000 Firmware 13 records HIGH Gl-mt300n-v2 Firmware 13 records HIGH

Records

93 records

TI-2026-21387 CVE-2026-26793 · GHSA-hhcc-5fw6-867j

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability…

HIGH 82

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02577 Published 2026-03-12 No fix listed CWE-77

TI-2024-26219 CVE-2024-39227 · GHSA-8j3m-968h-m85q

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750…

HIGH 82

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were d…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01191 Published 2024-08-06 No fix listed CWE-75

TI-2023-27815 CVE-2023-50919 · GHSA-3vmx-5x6r-25cw

An issue was discovered on GL.iNet devices before version 4.5.0.

HIGH 82

An issue was discovered on GL.iNet devices before version 4.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.47804 Published 2024-01-12 No fix listed CWE-287

TI-2023-15082 CVE-2023-31471 · GHSA-jxjx-jw7q-vw57

An issue was discovered on GL.iNet devices before 3.216.

HIGH 82

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01053 Published 2023-05-10 No fix listed

TI-2023-14015 CVE-2023-29778 · GHSA-2gc7-9j5g-v42f

GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.

HIGH 82

GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16001 Published 2023-05-02 No fix listed CWE-78

TI-2026-15312 CVE-2026-18686 · GHSA-7892-84cj-c35c

GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection

HIGH 81

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.04731 Published 2026-08-04 No fix listed CWE-74

TI-2026-15311 CVE-2026-18685 · GHSA-frjc-j2mw-rv29

GL.iNet GL-MT3000 modem.so glc set_upgrade command injection

HIGH 81

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03616 Published 2026-08-03 No fix listed CWE-74

TI-2026-15310 CVE-2026-18684 · GHSA-j682-xx2h-hv5m

GL.iNet GL-MT3000 modem.so glc remove_profile command injection

HIGH 81

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03616 Published 2026-08-03 No fix listed CWE-74

TI-2026-15259 CVE-2026-18616 · GHSA-39jx-5rpr-2f33

GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection

HIGH 81

A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03616 Published 2026-08-03 No fix listed CWE-74

TI-2026-15258 CVE-2026-18615 · GHSA-hh6h-4vwh-4vhf

GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection

HIGH 81

A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03616 Published 2026-08-03 No fix listed CWE-74

TI-2026-15257 CVE-2026-18614 · GHSA-r4vc-wqp8-j499

GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection

HIGH 81

A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03616 Published 2026-08-03 No fix listed CWE-74

TI-2026-15256 CVE-2026-18613 · GHSA-q4qj-7phf-qc9w

GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection

HIGH 81

A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00995 Published 2026-08-03 No fix listed CWE-707

TI-2026-15255 CVE-2026-18612 · GHSA-jjmc-7j8f-v4hf

GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection

HIGH 81

A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03967 Published 2026-08-03 No fix listed CWE-74

TI-2026-15246 CVE-2026-18602 · GHSA-767p-4fhm-3wpv

GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection

HIGH 81

A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03616 Published 2026-08-03 No fix listed CWE-74

TI-2026-15245 CVE-2026-18601 · GHSA-qv2j-hh7r-m4m2

GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection

HIGH 81

A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03616 Published 2026-08-03 No fix listed CWE-74

TI-2023-15086 CVE-2023-31475 · GHSA-27c8-cpgv-r39p

An issue was discovered on GL.iNet devices before 3.216.

HIGH 76

An issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13743 Published 2023-05-11 No fix listed CWE-120

TI-2026-15391 CVE-2026-18787 · GHSA-vfp6-456q-5pqw

GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection

HIGH 73

A vulnerability was identified in GL.iNet AX1800 up to 4.8.3.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03212 Published 2026-08-04 No fix listed CWE-74

TI-2026-15244 CVE-2026-18600 · GHSA-m56q-x47w-q72w

GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection

HIGH 73

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03212 Published 2026-08-03 No fix listed CWE-74

TI-2026-15242 CVE-2026-18598 · GHSA-35v2-77rf-53pc

GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection

HIGH 73

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03212 Published 2026-08-03 No fix listed CWE-74

TI-2026-10479 CVE-2026-12187 · GHSA-8rqp-5vg5-cv68

GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection

HIGH 73

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0194 Published 2026-06-14 Fixed in 4.7 CWE-74

TI-2026-10478 CVE-2026-12186 · GHSA-8x52-x2jf-947x

GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection

HIGH 73

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01966 Published 2026-06-14 Fixed in 4.7 CWE-74

TI-2024-30337 CVE-2024-45262 · GHSA-6xpp-xx5c-5qfg

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500…

HIGH 73

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00666 Published 2024-10-24 No fix listed CWE-22

TI-2026-15243 CVE-2026-18599 · GHSA-9x8v-f5rv-67fr

GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection

HIGH 72

A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5.

CVSS 4.0HIGH 8.6 Adjacent network Low privileges No interaction EPSS 0.04444 Published 2026-08-03 No fix listed CWE-74

TI-2023-15088 CVE-2023-31477 · GHSA-xcr9-xmx6-j7fh

A path traversal issue was discovered on GL.iNet devices before 3.216.

HIGH 72

A path traversal issue was discovered on GL.iNet devices before 3.216.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0094 Published 2023-05-11 No fix listed CWE-22

TI-2025-28567 CVE-2025-44018 · GHSA-29pc-8vpc-xrwf

Improper certificate validation in GL.iNet GL-AXT1800

HIGH 71

A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00346 Published 2025-11-24 No fix listed CWE-295

Open these records in search →