GL.iNet vulnerabilities

CVEs per yearBy the year they were published

1. 20253
2. 202627

Newest CVEs

• CVE-2026-19983

  GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection

  GL.iNet · A1300

  Medium6.9
• CVE-2026-19982

  GL.iNet BE9300/MT6000 Firewall-management RPC os command injection

  GL.iNet · BE9300

  Medium5.3
• CVE-2026-19981

  GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection

  GL.iNet · A1300

  Medium5.3
• CVE-2026-19980

  GL.iNet XE3000 Language Update ui.update_langs code injection

  GL.iNet · A1300

  Medium5.3
• CVE-2026-19979

  GL.iNet XE3000 WebDAV Service MOVE authorization

  GL.iNet · A1300

  Medium6.9
• CVE-2026-18787

  GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection

  GL.iNet · AX1800

  High8.7
• CVE-2026-18686

  GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection

  GL.iNet · GL-MT3000

  Critical9.3
• CVE-2026-18685

  GL.iNet GL-MT3000 modem.so glc set_upgrade command injection

  GL.iNet · GL-MT3000

  Critical9.3
• CVE-2026-18684

  GL.iNet GL-MT3000 modem.so glc remove_profile command injection

  GL.iNet · GL-MT3000

  Critical9.3
• CVE-2026-18602

  GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection

  GL.iNet · GL-MT3000

  Critical9.3