# cve.now: Gl.inet

The newest entries naming Gl.inet as an affected vendor (up to 200), of 40 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-19983](https://cve.now/CVE-2026-19983.md): GL.iNet XE3000 NAS Command Service gl\_nas\_sys os command injection (CVSS 6.9)
- [CVE-2026-19982](https://cve.now/CVE-2026-19982.md): GL.iNet BE9300/MT6000 Firewall-management RPC os command injection (CVSS 5.3)
- [CVE-2026-19981](https://cve.now/CVE-2026-19981.md): GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection (CVSS 5.3)
- [CVE-2026-19980](https://cve.now/CVE-2026-19980.md): GL.iNet XE3000 Language Update ui.update\_langs code injection (CVSS 5.3)
- [CVE-2026-19979](https://cve.now/CVE-2026-19979.md): GL.iNet XE3000 WebDAV Service MOVE authorization (CVSS 6.9)
- [CVE-2026-18787](https://cve.now/CVE-2026-18787.md): GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove\_rule command injection (CVSS 8.7)
- [CVE-2026-18686](https://cve.now/CVE-2026-18686.md): GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add\_user command injection (CVSS 9.3)
- [CVE-2026-18685](https://cve.now/CVE-2026-18685.md): GL.iNet GL-MT3000 modem.so glc set\_upgrade command injection (CVSS 9.3)
- [CVE-2026-18684](https://cve.now/CVE-2026-18684.md): GL.iNet GL-MT3000 modem.so glc remove\_profile command injection (CVSS 9.3)
- [CVE-2026-18616](https://cve.now/CVE-2026-18616.md): GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set\_peer command injection (CVSS 9.3)
- [CVE-2026-18615](https://cve.now/CVE-2026-18615.md): GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate\_publickey command injection (CVSS 9.3)
- [CVE-2026-18614](https://cve.now/CVE-2026-18614.md): GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable\_echo\_server command injection (CVSS 9.3)
- [CVE-2026-18613](https://cve.now/CVE-2026-18613.md): GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set\_config injection (CVSS 9.3)
- [CVE-2026-18612](https://cve.now/CVE-2026-18612.md): GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install\_package command injection (CVSS 9.3)
- [CVE-2026-18602](https://cve.now/CVE-2026-18602.md): GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get\_recommend\_config command injection (CVSS 9.3)
- [CVE-2026-18601](https://cve.now/CVE-2026-18601.md): GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check\_config command injection (CVSS 9.3)
- [CVE-2026-18600](https://cve.now/CVE-2026-18600.md): GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch\_status command injection (CVSS 8.7)
- [CVE-2026-18599](https://cve.now/CVE-2026-18599.md): GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set\_config command injection (CVSS 8.6)
- [CVE-2026-18598](https://cve.now/CVE-2026-18598.md): GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get\_system\_log command injection (CVSS 8.7)
- [CVE-2026-18585](https://cve.now/CVE-2026-18585.md): GL.iNet MT2500 APPS-NAS nas-web.get\_file\_list heap-based overflow (CVSS 5.3)
- [CVE-2026-18584](https://cve.now/CVE-2026-18584.md): GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization (CVSS 5.3)
- [CVE-2026-12187](https://cve.now/CVE-2026-12187.md): GL.iNet GL-MT3000 Online Firmware Upgrade one\_click\_upgrade command injection (CVSS 8.7)
- [CVE-2026-12186](https://cve.now/CVE-2026-12186.md): GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace\_country command injection (CVSS 8.7)
- [CVE-2026-11505](https://cve.now/CVE-2026-11505.md): GL.iNet XE3000 glnassys hard-coded key (CVSS 2.3)
- [CVE-2026-11452](https://cve.now/CVE-2026-11452.md): GL.iNet GL-MT3000 SET\_USER\_PWD glc FUN\_0042e200 command injection (CVSS 6.9)
- [CVE-2026-11451](https://cve.now/CVE-2026-11451.md): GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection (CVSS 6.9)
- [CVE-2026-11450](https://cve.now/CVE-2026-11450.md): GL.iNet GL-MT3000 Path Normalization dlopen command injection (CVSS 6.9)
- [CVE-2026-11449](https://cve.now/CVE-2026-11449.md): GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc\_sys command injection (CVSS 5.3)
- [CVE-2026-11448](https://cve.now/CVE-2026-11448.md): GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection (CVSS 5.1)
- [CVE-2026-11447](https://cve.now/CVE-2026-11447.md): GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo\_backend command injection (CVSS 5.3)
- [CVE-2026-11406](https://cve.now/CVE-2026-11406.md): GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection (CVSS 5.3)
- [CVE-2026-5959](https://cve.now/CVE-2026-5959.md): GL.iNet GL-RM1/GL-RM10/GL-RM10RC/GL-RM1PE Factory Reset improper authentication (CVSS 7.5)
- [CVE-2026-32293](https://cve.now/CVE-2026-32293.md): GL-iNet Comet (GL-RM1) KVM insufficient certificate validation (CVSS 3.7)
- [CVE-2026-32292](https://cve.now/CVE-2026-32292.md): GL-iNet Comet (GL-RM1) KVM insufficient login rate-limiting (CVSS 9.3)
- [CVE-2026-32291](https://cve.now/CVE-2026-32291.md): GL-iNet Comet (GL-RM1) KVM unauthenticated root access via UART serial console (CVSS 7.0)
- [CVE-2026-32290](https://cve.now/CVE-2026-32290.md): GL-iNet Comet (GL-RM1) KVM insufficient firmware verification (CVSS 7.0)
- [CVE-2025-44018](https://cve.now/CVE-2025-44018.md): A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. (CVSS 8.3)
- [CVE-2025-2851](https://cve.now/CVE-2025-2851.md): GL.iNet GL-A1300 Slate Plus RPC plugins.so buffer overflow (CVSS 8.6)
- [CVE-2025-2850](https://cve.now/CVE-2025-2850.md): GL.iNet GL-A1300 Slate Plus Download Interface improper authorization (CVSS 5.1)
- [CVE-2025-2811](https://cve.now/CVE-2025-2811.md): GL.iNet GL-A1300 Slate Plus API redos (CVSS 6.9)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/gl-inet
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.