Gl-inet Mt3000 vulnerabilities

• gl-inet gl-mt3000 GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection CVE-2026-18616 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection CVE-2026-18615 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection CVE-2026-18614 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection CVE-2026-18613 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection CVE-2026-18612 9.3 CriticalAugust 3, 2026
• gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +23 more +25 more An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,... CVE-2024-45263 8.8 HighOctober 24, 2024
• gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +23 more +25 more An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,... CVE-2024-45262 8.8 HighOctober 24, 2024
• gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +23 more +25 more An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,... CVE-2024-45261 8.0 HighOctober 24, 2024
• gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +23 more +25 more An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,... CVE-2024-45260 8.0 HighOctober 24, 2024
• gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +23 more +25 more An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,... CVE-2024-45259 6.5 MediumOctober 24, 2024
• gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +15 more +17 more A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect... CVE-2024-28077 7.5 HighAugust 26, 2024
• gl-inet a1300 firmware, ap1300 firmware, ar300m16 firmware +25 more +27 more An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4... CVE-2024-39229 5.3 MediumAugust 6, 2024
• gl-inet a1300 firmware, ap1300 firmware, ar300m16 firmware +26 more +28 more GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000... CVE-2024-39228 9.8 CriticalAugust 6, 2024
• gl-inet a1300 firmware, ap1300 firmware, ar300m16 firmware +46 more +48 more GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000... CVE-2024-39227 9.8 CriticalAugust 6, 2024
• gl-inet a1300 firmware, ap1300 firmware, ar300m16 firmware +25 more +27 more GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000... CVE-2024-39226 EPSS 20.4% 9.8 CriticalAugust 6, 2024
• gl-inet a1300 firmware, ap1300 firmware, ar300m16 firmware +25 more +27 more GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000... CVE-2024-39225 EPSS 14.4% 9.8 CriticalAugust 6, 2024
• gl-i x1200, gl-inet 0300, a1300 +50 more +52 more An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via... CVE-2024-27356 Public exploit EPSS 23.9% 7.5 HighFebruary 27, 2024
• gl.inet a1300, ar300m, ar750 +21 more +23 more An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID... CVE-2023-50920 5.5 MediumJanuary 12, 2024
• gl-inet gl-a1300 firmware, gl-ar300m firmware, gl-ar750 firmware +9 more +11 more An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication... CVE-2023-50919 Public exploit EPSS 47.8% 9.8 CriticalJanuary 12, 2024
• gl-inet gl-a1300 firmware, gl-ar300m firmware, gl-ar750 firmware +9 more +11 more An issue was discovered on GL.iNet devices through 4.5.0. Attackers who are able to steal the... CVE-2023-50922 7.2 HighJanuary 3, 2024
• gl-inet gl-a1300 firmware, gl-ar300m firmware, gl-ar750 firmware +9 more +11 more An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the add_user... CVE-2023-50921 9.8 CriticalJanuary 3, 2024
• gl.inet a1300, ar300m, ar750 +21 more +23 more Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6,... CVE-2023-50445 Public exploit 7.8 HighDecember 28, 2023
• gl-inet gl-a1300 firmware, gl-ap1300 firmware, gl-ap1300lte firmware +29 more +31 more A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing... CVE-2023-31477 7.5 HighMay 11, 2023
• gl-inet gl-a1300 firmware, gl-ap1300 firmware, gl-ap1300lte firmware +29 more +31 more An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in... CVE-2023-31475 EPSS 13.7% 9.8 CriticalMay 11, 2023
• gl-inet gl-a1300 firmware, gl-ap1300 firmware, gl-ap1300lte firmware +29 more +31 more An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in... CVE-2023-31473 4.9 MediumMay 11, 2023
• gl-inet gl-a1300 firmware, gl-ap1300 firmware, gl-ap1300lte firmware +29 more +31 more An issue was discovered on GL.iNet devices before 3.216. Through the software installation... CVE-2023-31471 9.8 CriticalMay 10, 2023
• gl-inet gl-a1300 firmware, gl-ap1300 firmware, gl-ap1300lte firmware +29 more +31 more An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information... CVE-2023-31478 EPSS 29.7% 7.5 HighMay 9, 2023
• gl-inet gl-a1300 firmware, gl-ap1300 firmware, gl-ap1300lte firmware +29 more +31 more An issue was discovered on GL.iNet devices before 3.216. Through the software installation... CVE-2023-31474 7.5 HighMay 9, 2023
• gl-inet gl-a1300 firmware, gl-ap1300 firmware, gl-ap1300lte firmware +29 more +31 more An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in... CVE-2023-31472 EPSS 19.9% 7.5 HighMay 9, 2023
• gl-inet gl-mt3000 firmware GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc... CVE-2023-29778 EPSS 16.0% 9.8 CriticalMay 2, 2023