Gl.inet Mt3000 vulnerabilities

• belkin ax1800, gl.inet a1300, axt1800 +5 more +7 more GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection CVE-2026-19983 6.9 MediumAugust 17, 2026
• belkin ax1800, gl.inet a1300, axt1800 +14 more +16 more GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection CVE-2026-19981 5.3 MediumAugust 17, 2026
• belkin ax1800, gl.inet a1300, axt1800 +14 more +16 more GL.iNet XE3000 Language Update ui.update_langs code injection CVE-2026-19980 5.3 MediumAugust 17, 2026
• belkin ax1800, gl.inet a1300, axt1800 +14 more +16 more GL.iNet XE3000 WebDAV Service MOVE authorization CVE-2026-19979 6.9 MediumAugust 17, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection CVE-2026-18686 9.3 CriticalAugust 4, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 modem.so glc set_upgrade command injection CVE-2026-18685 9.3 CriticalAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 modem.so glc remove_profile command injection CVE-2026-18684 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection CVE-2026-18616 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection CVE-2026-18615 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection CVE-2026-18614 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection CVE-2026-18613 9.3 CriticalAugust 3, 2026
• gl-inet gl-mt3000 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection CVE-2026-18612 9.3 CriticalAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection CVE-2026-18602 9.3 CriticalAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection CVE-2026-18601 9.3 CriticalAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection CVE-2026-18600 8.7 HighAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection CVE-2026-18599 8.6 HighAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection CVE-2026-18598 8.7 HighAugust 3, 2026
• gl.inet be3600, be6500, be9300 +8 more +10 more GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow CVE-2026-18585 5.3 MediumAugust 3, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection CVE-2026-12187 8.7 HighJune 14, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection CVE-2026-12186 8.7 HighJune 14, 2026
• belkin ax1800, gl.inet a1300, axt1800 +5 more +7 more GL.iNet XE3000 glnassys hard-coded key CVE-2026-11505 2.3 LowJune 8, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection CVE-2026-11452 6.9 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection CVE-2026-11451 6.9 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Path Normalization dlopen command injection CVE-2026-11450 6.9 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection CVE-2026-11449 5.3 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection CVE-2026-11448 5.1 MediumJune 7, 2026
• gl.inet gl-mt3000 GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection CVE-2026-11447 5.3 MediumJune 7, 2026
• gl.inet mt3000 GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection CVE-2026-11406 5.3 MediumJune 6, 2026
• gl.inet gl-a1300 slate plus, gl-ar300m shadow, gl-ar300m16 shadow +20 more +22 more GL.iNet GL-A1300 Slate Plus RPC plugins.so buffer overflow CVE-2025-2851 8.6 HighApril 26, 2025
• gl.inet gl-a1300 slate plus, gl-ar300m shadow, gl-ar300m16 shadow +20 more +22 more GL.iNet GL-A1300 Slate Plus Download Interface improper authorization CVE-2025-2850 5.1 MediumApril 26, 2025
• gl.inet gl-a1300 slate plus, gl-ar300m shadow, gl-ar300m16 shadow +20 more +22 more GL.iNet GL-A1300 Slate Plus API redos CVE-2025-2811 6.9 MediumApril 26, 2025
• gl.inet a1300, ar300m, ar750 +21 more +23 more An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID... CVE-2023-50920 5.5 MediumJanuary 12, 2024
• gl.inet a1300, ar300m, ar750 +21 more +23 more Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6,... CVE-2023-50445 Public exploit 7.8 HighDecember 28, 2023