Ar300m16 Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AF

Product

Ar300m16 Firmware

by Gl-inet · last CVE Mar 12, 2026

17

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities17 In the news0 Timeline

Severity mix

Critical 8High 7Medium 2Low 0

Severity

All severities17 Critical8 High7 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Ar300m16 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-26791	9.8	3%	Mar 12	GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_server function Affected: 4.3.11
CVE-2026-26793	9.8	2%	Mar 12	GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function Affected: 4.3.11
CVE-2026-26795	9.8	3%	Mar 12	GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function Affected: 4.3.11
CVE-2026-26792	9.8	3%	Mar 12	GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_url, target_version, current_version,… Affected: 4.3.11
CVE-2024-39227	9.8	1%	Aug 6	GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,… Affected: 4.3.11
CVE-2024-39226	9.8	20%	Aug 6	GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,… Affected: 4.3.11
CVE-2024-39228	9.8	1%	Aug 6	GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,… Affected: 4.3.11
CVE-2024-39225	9.8	14%	Aug 6	GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,… Affected: 4.3.11
CVE-2026-26794	8.8	0%	Mar 12	GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add_group() function Affected: 4.3.11
CVE-2024-45262	8.8	1%	Oct 24	An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2 Affected: 4.3.17
CVE-2024-45263	8.8	0%	Oct 24	An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2 Affected: 4.3.17
CVE-2024-45260	8.0	4%	Oct 24	An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2 Affected: 4.3.17
CVE-2024-45261	8.0	0%	Oct 24	An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2 Affected: 4.3.17
CVE-2024-28077	7.5	0%	Aug 26	A denial-of-service issue was discovered on certain GL-iNet devices Affected: 4.3.10
CVE-2024-27356	7.5	24%	Feb 27	An issue was discovered on certain GL-iNet devices Affected: 4.3.10
CVE-2024-45259	6.5	0%	Oct 24	An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2 Affected: 4.3.17
CVE-2024-39229	5.3	0%	Aug 6	An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750… Affected: 4.3.11