CVE-2026-18601: falha crítica em GL.iNet GL-MT3000
GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
48Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 9.3epss 3.6%
A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the function ovpn-client.check_config of the file /cgi-bin/glc of the component ovpn-client.so Native Plugin. Performing a manipulation of the argument filename results in command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
GL.iNet · GL-MT3000PoCs públicas encontradas — 1
cve_referencegithub.com/StrTzz123/iot_vul/blob/main/GL-iNet/MT3000/4.4.5/ovpn_check_config_glc_rce/CVE.mdnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — GL.iNet GL-MT3000
No mesmo produto, das mais perigosas para as menos.
CVE-2026-18686CRITICALGL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injectionEPSS 4.7%CVE-2026-18599HIGHGL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injectionEPSS 4.4%CVE-2026-18685CRITICALGL.iNet GL-MT3000 modem.so glc set_upgrade command injectionEPSS 3.6%CVE-2026-18684CRITICALGL.iNet GL-MT3000 modem.so glc remove_profile command injectionEPSS 3.6%CVE-2026-18602CRITICALGL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injectionEPSS 3.6%CVE-2026-18600HIGHGL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injectionEPSS 3.2%