GL.iNet GL-MT3000 vulnerabilities

Newest CVEs

• CVE-2026-18686

  GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection

  GL.iNet · GL-MT3000

  Critical9.3
• CVE-2026-18685

  GL.iNet GL-MT3000 modem.so glc set_upgrade command injection

  GL.iNet · GL-MT3000

  Critical9.3
• CVE-2026-18684

  GL.iNet GL-MT3000 modem.so glc remove_profile command injection

  GL.iNet · GL-MT3000

  Critical9.3
• CVE-2026-18602

  GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection

  GL.iNet · GL-MT3000

  Critical9.3
• CVE-2026-18601

  GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection

  GL.iNet · GL-MT3000

  Critical9.3
• CVE-2026-18600

  GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection

  GL.iNet · GL-MT3000

  High8.7
• CVE-2026-18599

  GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection

  GL.iNet · GL-MT3000

  High8.6
• CVE-2026-18598

  GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection

  GL.iNet · GL-MT3000

  High8.7
• CVE-2026-12187

  GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection

  GL.iNet · GL-MT3000

  High8.7
• CVE-2026-12186

  GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection

  GL.iNet · GL-MT3000

  High8.7