Gl.inet Gl-mt3000 vulnerabilities

• gl.inet gl-mt3000 GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection CVE-2026-18686 9.3 CriticalAugust 4, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 modem.so glc set_upgrade command injection CVE-2026-18685 9.3 CriticalAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 modem.so glc remove_profile command injection CVE-2026-18684 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection CVE-2026-18616 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection CVE-2026-18615 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection CVE-2026-18614 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection CVE-2026-18613 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection CVE-2026-18612 9.3 CriticalAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection CVE-2026-18602 9.3 CriticalAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection CVE-2026-18601 9.3 CriticalAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection CVE-2026-18600 8.7 HighAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection CVE-2026-18599 8.6 HighAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection CVE-2026-18598 8.7 HighAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection CVE-2026-12187 8.7 HighJune 14, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection CVE-2026-12186 8.7 HighJune 14, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection CVE-2026-11452 6.9 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection CVE-2026-11451 6.9 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Path Normalization dlopen command injection CVE-2026-11450 6.9 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection CVE-2026-11449 5.3 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection CVE-2026-11448 5.1 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection CVE-2026-11447 5.3 MediumJune 7, 2026
• gl.inet gl-a1300 slate plus, gl-ar300m shadow, gl-ar300m16 shadow +20 more +22 more GL.iNet GL-A1300 Slate Plus RPC plugins.so buffer overflow CVE-2025-2851 8.6 HighApril 26, 2025
• gl.inet gl-a1300 slate plus, gl-ar300m shadow, gl-ar300m16 shadow +20 more +22 more GL.iNet GL-A1300 Slate Plus Download Interface improper authorization CVE-2025-2850 5.1 MediumApril 26, 2025
• gl.inet gl-a1300 slate plus, gl-ar300m shadow, gl-ar300m16 shadow +20 more +22 more GL.iNet GL-A1300 Slate Plus API redos CVE-2025-2811 6.9 MediumApril 26, 2025