CVEs we hold for Gl.inet

Records whose assigning authority named Gl.inet as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-5959GL.iNet GL-RM1/GL-RM10/GL-RM10RC/GL-RM1PE Factory Reset improper authenticationGL.iNet GL-RM1PE

CVE-2026-19983GL.iNet XE3000 NAS Command Service gl_nas_sys os command injectionGL.iNet XE3000

CVE-2026-19982GL.iNet BE9300/MT6000 Firewall-management RPC os command injectionGL.iNet MT6000

CVE-2026-19981GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injectionGL.iNet XE3000

CVE-2026-19980GL.iNet XE3000 Language Update ui.update_langs code injectionGL.iNet XE3000

CVE-2026-19979GL.iNet XE3000 WebDAV Service MOVE authorizationGL.iNet XE3000

CVE-2026-18787GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injectionGL.iNet AX1800

CVE-2026-18686GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injectionGL.iNet GL-MT3000

CVE-2026-18685GL.iNet GL-MT3000 modem.so glc set_upgrade command injectionGL.iNet GL-MT3000

CVE-2026-18684GL.iNet GL-MT3000 modem.so glc remove_profile command injectionGL.iNet GL-MT3000

CVE-2026-18602GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injectionGL.iNet GL-MT3000

CVE-2026-18601GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injectionGL.iNet GL-MT3000

CVE-2026-18600GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injectionGL.iNet GL-MT3000

CVE-2026-18599GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injectionGL.iNet GL-MT3000

CVE-2026-18598GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injectionGL.iNet GL-MT3000

CVE-2026-18585GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflowGL.iNet MT2500

CVE-2026-18584GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorizationGL.iNet XE300

CVE-2026-12187GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injectionGL.iNet GL-MT3000

CVE-2026-12186GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injectionGL.iNet GL-MT3000

CVE-2026-11505GL.iNet XE3000 glnassys hard-coded keyGL.iNet XE3000

CVE-2026-11452GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injectionGL.iNet GL-MT3000

CVE-2026-11451GL.iNet GL-MT3000 FTP Protocol glc snprintf command injectionGL.iNet GL-MT3000

CVE-2026-11450GL.iNet GL-MT3000 Path Normalization dlopen command injectionGL.iNet GL-MT3000

CVE-2026-11449GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injectionGL.iNet GL-MT3000

CVE-2026-11448GL.iNet GL-MT3000 Minidlna Service rpc realpath command injectionGL.iNet GL-MT3000

CVE-2026-11447GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injectionGL.iNet GL-MT3000

CVE-2026-11406GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injectionGL.iNet MT3000

CVE-2025-2851GL.iNet GL-A1300 Slate Plus RPC plugins.so buffer overflowGL.iNet GL-XE3000 Puli AX

CVE-2025-2850GL.iNet GL-A1300 Slate Plus Download Interface improper authorizationGL.iNet GL-XE3000 Puli AX

CVE-2025-2811GL.iNet GL-A1300 Slate Plus API redosGL.iNet GL-XE3000 Puli AX

30 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.