Gl.inet vulnerabilities

Products

• Gl-mt3000 21
• Mt6000 10
• Mt3000 9
• Ax1800 8
• Mt2500 8
• A1300 7
• Axt1800 7
• X3000 7
• Xe3000 7
• Be9300 6
• E5800 5
• Be3600 4
• Be6500 4
• Mt3600be 4
• Mt5000 4
• X2000 4
• Ar300m 3
• Be10000 3
• Be1400 3
• Gl-a1300 Slate Plus 3
• Gl-ar300m16 Shadow 3
• Gl-ar300m Shadow 3
• Gl-ar750 Creta 3
• Gl-ar750s-ext Slate 3
• Gl-ax1800 Flint 3
• Gl-axt1800 Slate Ax 3
• Gl-b1300 Convexa-b 3
• Gl-b3000 Marble 3
• Gl-be3600 Slate 7 3
• Gl-e750 3
• Gl-e750v2 Mudi 3
• Gl-mt1300 Beryl 3
• Gl-mt2500 Brume 2 3
• Gl-mt3000 Beryl Ax 3
• Gl-mt300n-v2 Mango 3
• Gl-mt6000 Flint 2 3
• Gl-sft1200 Opal 3
• Gl-x3000 Spitz Ax 3
• Gl-x300b Collie 3
• Gl-x750 Spitz 3

Show 7 moreShow less

• Gl-xe3000 Puli Ax 3
• Gl-xe300 Puli 3
• Ar750 2
• Ar750s 2
• B1300 2
• Mt1300 2
• Mt300n V2 2

Newest

• belkin ax1800, gl.inet a1300, axt1800 +5 more +7 more GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection CVE-2026-19983 6.9 MediumAugust 17, 2026
• gl.inet be9300, mt6000 +1 more GL.iNet BE9300/MT6000 Firewall-management RPC os command injection CVE-2026-19982 5.3 MediumAugust 17, 2026
• belkin ax1800, gl.inet a1300, axt1800 +14 more +16 more GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection CVE-2026-19981 5.3 MediumAugust 17, 2026
• belkin ax1800, gl.inet a1300, axt1800 +14 more +16 more GL.iNet XE3000 Language Update ui.update_langs code injection CVE-2026-19980 5.3 MediumAugust 17, 2026
• belkin ax1800, gl.inet a1300, axt1800 +14 more +16 more GL.iNet XE3000 WebDAV Service MOVE authorization CVE-2026-19979 6.9 MediumAugust 17, 2026
• gl.inet be9300, netgear be9300 firmware, mr60 +49 more +51 more Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers CVE-2026-11814 4.9 MediumAugust 11, 2026
• belkin ax1800 GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection CVE-2026-18787 8.7 HighAugust 4, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection CVE-2026-18686 9.3 CriticalAugust 4, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 modem.so glc set_upgrade command injection CVE-2026-18685 9.3 CriticalAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 modem.so glc remove_profile command injection CVE-2026-18684 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection CVE-2026-18616 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection CVE-2026-18615 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection CVE-2026-18614 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection CVE-2026-18613 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection CVE-2026-18612 9.3 CriticalAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection CVE-2026-18602 9.3 CriticalAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection CVE-2026-18601 9.3 CriticalAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection CVE-2026-18600 8.7 HighAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection CVE-2026-18599 8.6 HighAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection CVE-2026-18598 8.7 HighAugust 3, 2026
• gl.inet be3600, be6500, be9300 +8 more +10 more GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow CVE-2026-18585 5.3 MediumAugust 3, 2026
• gl.inet e5800, e750, x2000 +3 more +5 more GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization CVE-2026-18584 5.3 MediumAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection CVE-2026-12187 8.7 HighJune 14, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection CVE-2026-12186 8.7 HighJune 14, 2026
• belkin ax1800, gl.inet a1300, axt1800 +5 more +7 more GL.iNet XE3000 glnassys hard-coded key CVE-2026-11505 2.3 LowJune 8, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection CVE-2026-11452 6.9 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection CVE-2026-11451 6.9 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Path Normalization dlopen command injection CVE-2026-11450 6.9 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection CVE-2026-11449 5.3 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection CVE-2026-11448 5.1 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection CVE-2026-11447 5.3 MediumJune 7, 2026
• gl.inet mt3000 GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection CVE-2026-11406 5.3 MediumJune 6, 2026
• gl.inet gl-rm1, gl-rm10, gl-rm10rc +1 more +3 more GL.iNet GL-RM1/GL-RM10/GL-RM10RC/GL-RM1PE Factory Reset improper authentication CVE-2026-5959 7.5 HighApril 9, 2026
• gl.inet gl-a1300 slate plus, gl-ar300m shadow, gl-ar300m16 shadow +20 more +22 more GL.iNet GL-A1300 Slate Plus RPC plugins.so buffer overflow CVE-2025-2851 8.6 HighApril 26, 2025
• gl.inet gl-a1300 slate plus, gl-ar300m shadow, gl-ar300m16 shadow +20 more +22 more GL.iNet GL-A1300 Slate Plus Download Interface improper authorization CVE-2025-2850 5.1 MediumApril 26, 2025
• gl.inet gl-a1300 slate plus, gl-ar300m shadow, gl-ar300m16 shadow +20 more +22 more GL.iNet GL-A1300 Slate Plus API redos CVE-2025-2811 6.9 MediumApril 26, 2025
• gl-i x1200, gl-inet 0300, a1300 +50 more +52 more An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via... CVE-2024-27356 Public exploit EPSS 23.9% 7.5 HighFebruary 27, 2024
• gl.inet a1300, ar300m, ar750 +21 more +23 more An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID... CVE-2023-50920 5.5 MediumJanuary 12, 2024
• gl.inet a1300, ar300m, ar750 +21 more +23 more Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6,... CVE-2023-50445 Public exploit 7.8 HighDecember 28, 2023
• gl.inet ar300m, gl-inet gl-ar300m firmware +1 more In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through... CVE-2023-46455 EPSS 47.0% 7.5 HighDecember 12, 2023