Vulnerabilities in GL-iNet
10 resultsCVE-2026-18612CRITICALGL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injectionEPSS 4.0%CVE-2026-18615CRITICALGL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injectionEPSS 3.6%CVE-2026-18614CRITICALGL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injectionEPSS 3.6%CVE-2026-18616CRITICALGL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injectionEPSS 3.6%CVE-2026-18613CRITICALGL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injectionEPSS 1.0%CVE-2026-32292CRITICALGL-iNet Comet (GL-RM1) KVM insufficient login rate-limitingEPSS 0.6%CVE-2026-32291HIGHGL-iNet Comet (GL-RM1) KVM unauthenticated root access via UART serial consoleEPSS 0.3%CVE-2025-44018HIGHA firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can leaEPSS 0.3%CVE-2026-32293MEDIUMGL-iNet Comet (GL-RM1) KVM insufficient certificate validationEPSS 0.3%CVE-2026-32290HIGHGL-iNet Comet (GL-RM1) KVM insufficient firmware verificationEPSS 0.1%