GL-iNet vulnerabilities
10 published CVEs name GL-iNet among the affected products.
- 10Published CVEs10 of them scored
- 10Last 12 monthspublished in the last year
- 6Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-18616
GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection
GL-iNet · GL-MT3000
Critical9.3 - CVE-2026-18615
GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection
GL-iNet · GL-MT3000
Critical9.3 - CVE-2026-18614
GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection
GL-iNet · GL-MT3000
Critical9.3 - CVE-2026-18613
GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection
GL-iNet · GL-MT3000
Critical9.3 - CVE-2026-18612
GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection
GL-iNet · GL-MT3000
Critical9.3 - CVE-2026-32293
GL-iNet Comet (GL-RM1) KVM insufficient certificate validation
GL-iNet · Comet KVM
Medium6.3 - CVE-2026-32292
GL-iNet Comet (GL-RM1) KVM insufficient login rate-limiting
GL-iNet · Comet KVM
Critical9.3 - CVE-2026-32291
GL-iNet Comet (GL-RM1) KVM unauthenticated root access via UART serial console
GL-iNet · Comet KVM
High7.0 - CVE-2026-32290
GL-iNet Comet (GL-RM1) KVM insufficient firmware verification
GL-iNet · Comet KVM
High7.0 - CVE-2025-44018
A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware…
GL-Inet · GL-AXT1800
High8.3