Gl.inet vulnerabilities
40 CVEs and advisories name Gl.inet as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-19983GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection
- CVE-2026-19982GL.iNet BE9300/MT6000 Firewall-management RPC os command injection
- CVE-2026-19981GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection
- CVE-2026-19980GL.iNet XE3000 Language Update ui.update_langs code injection
- CVE-2026-19979GL.iNet XE3000 WebDAV Service MOVE authorization
- CVE-2026-18787GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection
- CVE-2026-18686GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection
- CVE-2026-18685GL.iNet GL-MT3000 modem.so glc set_upgrade command injection
- CVE-2026-18684GL.iNet GL-MT3000 modem.so glc remove_profile command injection
- CVE-2026-18616GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection
- CVE-2026-18615GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection
- CVE-2026-18614GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection
- CVE-2026-18613GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection
- CVE-2026-18612GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection
- CVE-2026-18602GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection
- CVE-2026-18601GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection
- CVE-2026-18600GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection
- CVE-2026-18599GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection
- CVE-2026-18598GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection
- CVE-2026-18585GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow
- CVE-2026-18584GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization
- CVE-2026-12187GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection
- CVE-2026-12186GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection
- CVE-2026-11505GL.iNet XE3000 glnassys hard-coded key
- CVE-2026-11452GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection
- CVE-2026-11451GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection
- CVE-2026-11450GL.iNet GL-MT3000 Path Normalization dlopen command injection
- CVE-2026-11449GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection
- CVE-2026-11448GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection
- CVE-2026-11447GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection