GL.iNet

Records93All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high33CVSS 7.0–8.9

Exploited now

GL.iNet records in CISA KEV

No GL.iNet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ar300m16 Firmware 17 records HIGH Gl-ax1800 Firmware 16 records HIGH Gl-ar300m Firmware 15 records HIGH Ax1800 Firmware 14 records HIGH Gl-ar750s Firmware 14 records HIGH Gl-axt1800 Firmware 13 records HIGH Gl-mt3000 Firmware 13 records HIGH Gl-mt300n-v2 Firmware 13 records HIGH

Records

17 records in Ar300m16 Firmware · all components

TI-2026-21387 CVE-2026-26793 · GHSA-hhcc-5fw6-867j

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability…

HIGH 82

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02577 Published 2026-03-12 No fix listed CWE-77

TI-2024-26219 CVE-2024-39227 · GHSA-8j3m-968h-m85q

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750…

HIGH 82

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were d…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01191 Published 2024-08-06 No fix listed CWE-75

TI-2024-30337 CVE-2024-45262 · GHSA-6xpp-xx5c-5qfg

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500…

HIGH 73

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00666 Published 2024-10-24 No fix listed CWE-22

TI-2024-30335 CVE-2024-45260 · GHSA-9m3x-q77m-pwhx

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500…

HIGH 70

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.04099 Published 2024-10-24 No fix listed CWE-863

TI-2024-26217 CVE-2024-39225 · GHSA-8pww-55pm-85vv

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750…

MEDIUM 64

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14416 Published 2024-08-06 No fix listed CWE-307

TI-2024-26218 CVE-2024-39226 · GHSA-9qmq-f7gc-gf44

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750…

MEDIUM 61

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20403 Published 2024-08-06 No fix listed CWE-77

TI-2024-18193 CVE-2024-27356 · GHSA-2m9v-3qff-5xxf

An issue was discovered on certain GL-iNet devices.

MEDIUM 59

An issue was discovered on certain GL-iNet devices.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.23905 Published 2024-02-27 No fix listed CWE-200

TI-2026-21386 CVE-2026-26792 · GHSA-x28p-58gf-rh8c

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection…

MEDIUM 55

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_url, target_version, current_version, firmware_upload, hash_type, hash_value, and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0322 Published 2026-03-12 No fix listed CWE-77

TI-2026-21389 CVE-2026-26795 · GHSA-6vxg-w2p5-89mg

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability…

MEDIUM 54

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02886 Published 2026-03-12 No fix listed CWE-77

TI-2026-21385 CVE-2026-26791 · GHSA-g25x-8qh5-4hf4

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability…

MEDIUM 54

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_server function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02886 Published 2026-03-12 No fix listed CWE-77

TI-2024-26220 CVE-2024-39228 · GHSA-rf88-px5j-vhj4

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750…

MEDIUM 50

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00662 Published 2024-08-06 No fix listed CWE-78

TI-2026-21388 CVE-2026-26794 · GHSA-799g-jhg4-3mqg

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via…

MEDIUM 41

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add_group() function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00526 Published 2026-03-12 No fix listed CWE-89

TI-2024-30338 CVE-2024-45263 · GHSA-vpfw-56r4-6hcq

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500…

MEDIUM 40

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0027 Published 2024-10-24 No fix listed CWE-434

TI-2024-18665 CVE-2024-28077 · GHSA-h2xr-f73x-x5xm

A denial-of-service issue was discovered on certain GL-iNet devices.

LOW 39

A denial-of-service issue was discovered on certain GL-iNet devices.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00431 Published 2024-08-26 No fix listed

TI-2024-30336 CVE-2024-45261 · GHSA-2f8j-394w-hvgc

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500…

LOW 37

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00494 Published 2024-10-24 No fix listed CWE-863

TI-2024-30334 CVE-2024-45259 · GHSA-g8q6-23x5-v2wf

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500…

LOW 28

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00227 Published 2024-10-24 No fix listed CWE-326

TI-2024-26221 CVE-2024-39229 · GHSA-42jh-6qqc-g99m

An issue in GL-iNet products…

LOW 28

An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, XE3000/X3000 v4,…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00177 Published 2024-08-06 No fix listed CWE-924

Open these records in search →