GL
Product
GL-MT3000
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 14Medium 5Low 0
Watch
Add GL-MT3000 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18686 | 9.8 | Aug 4 | GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5 |
| CVE-2026-18685 | 9.8 | Aug 3 | GL.iNet GL-MT3000 modem.so glc set_upgrade command injection Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5 |
| CVE-2026-18684 | 9.8 | Aug 3 | GL.iNet GL-MT3000 modem.so glc remove_profile command injection Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5 |
| CVE-2026-18616 | 9.8 | Aug 3 | GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5 |
| CVE-2026-18615 | 9.8 | Aug 3 | GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5 |
| CVE-2026-18614 | 9.8 | Aug 3 | GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5 |
| CVE-2026-18613 | 9.8 | Aug 3 | GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5 |
| CVE-2026-18612 | 9.8 | Aug 3 | GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5 |
| CVE-2026-18602 | 9.8 | Aug 3 | GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5 |
| CVE-2026-18601 | 9.8 | Aug 3 | GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5 |
| CVE-2023-50919 | 9.8 | Jan 12 | An issue was discovered on GL.iNet devices before version 4.5.0 Affected: 4.3.7; 4.4.6 |
| CVE-2023-50921 | 9.8 | Jan 3 | An issue was discovered on GL.iNet devices through 4.5.0 Affected: 4.4.6 |
| CVE-2023-31475 | 9.8 | May 11 | An issue was discovered on GL.iNet devices before 3.216 Affected: before 3.216 |
| CVE-2023-31471 | 9.8 | May 10 | An issue was discovered on GL.iNet devices before 3.216 Affected: before 3.216 |
| CVE-2023-29778 | 9.8 | May 2 | GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread Affected: 4.1.0 |
Showing 15
