CVE-2024-39226

🗓️ 06 Aug 2024 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 94 Views

GL-iNet products vulnerability in /cgi-bin/glc endpoin

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	GL.iNet Path Traversal	25 Nov 202500:00	–	bdu_fstec
Circl	CVE-2024-39226	11 May 202519:27	–	circl
CNNVD	GL.iNet’s various products have path traversal vulnerabilities	6 Aug 202400:00	–	cnnvd
Cvelist	CVE-2024-39226	6 Aug 202400:00	–	cvelist
NVD	CVE-2024-39226	6 Aug 202416:15	–	nvd
osv_cve	CVE-2024-39226	6 Aug 202416:15	–	osv_cve
Positive Technologies	PT-2024-28398 · Gl.Inet · X750 +19	6 Aug 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-39226: Improper Limitation of a Pathname to a Restricted Directory	6 Aug 202400:00	–	rapid7
RedhatCVE	CVE-2024-39226	9 Jan 202609:33	–	redhatcve
Vulnrichment	CVE-2024-39226	6 Aug 202400:00	–	vulnrichment

NVD

Node

AND

gl-inet mt6000_firmwareMatch4.5.8

gl-inet mt6000Match-

Node

AND

gl-inet a1300_firmwareMatch4.5.16

gl-inet a1300Match-

Node

AND

gl-inet x300b_firmwareMatch4.5.16

gl-inet x300bMatch-

Node

AND

gl-inet ax1800_firmwareMatch4.5.16

gl-inet ax1800Match-

Node

AND

gl-inet axt1800_firmwareMatch4.5.16

gl-inet axt1800Match-

Node

AND

gl-inet mt2500_firmwareMatch4.5.16

gl-inet mt2500Match-

Node

AND

gl-inet mt3000_firmwareMatch4.5.16

gl-inet mt3000Match-

Node

AND

gl-inet x3000_firmwareMatch4.4.8

gl-inet x3000Match-

Node

AND

gl-inet xe3000_firmwareMatch4.4.8

gl-inet xe3000Match-

Node

AND

gl-inet xe300_firmwareMatch4.3.16

gl-inet xe300Match-

Node

AND

gl-inet e750_firmwareMatch4.3.12

gl-inet e750Match-

Node

AND

gl-inet x750_firmwareMatch4.3.11

gl-inet x750Match-

Node

AND

gl-inet sft1200_firmwareMatch4.3.11

gl-inet sft1200Match-

Node

AND

gl-inet ar300m_firmwareMatch4.3.11

gl-inet ar300mMatch-

Node

AND

gl-inet ar300m16_firmwareMatch4.3.11

gl-inet ar300m16Match-

Node

AND

gl-inet ar750_firmwareMatch4.3.11

gl-inet ar750Match-

Node

AND

gl-inet ar750s_firmwareMatch4.3.11

gl-inet ar750sMatch-

Node

AND

gl-inet b1300_firmwareMatch4.3.11

gl-inet b1300Match-

Node

AND

gl-inet mt1300_firmwareMatch4.3.11

gl-inet mt1300Match-

Node

AND

gl-inet mt300n-v2_firmwareMatch4.3.11

gl-inet mt300n-v2Match-

Node

AND

gl-inet ap1300_firmwareMatch3.217

gl-inet ap1300Match-

Node

AND

gl-inet b2200_firmwareMatch3.216

gl-inet b2200Match-

Node

AND

gl-inet mv1000_firmwareMatch3.216

gl-inet mv1000Match-

Node

AND

gl-inet mv1000w_firmwareMatch3.216

gl-inet mv1000wMatch-

Node

AND

gl-inet usb150_firmwareMatch3.216

gl-inet usb150Match-

Node

AND

gl-inet sf1200_firmwareMatch3.216

gl-inet sf1200Match-

Node

AND

gl-inet n300_firmwareMatch3.216

gl-inet n300Match-

Node

AND

gl-inet s1300_firmwareMatch3.216

gl-inet s1300Match-

Source	Link
github	www.github.com/gl-inet/CVE-issues/blob/main/4.0.0/s2s%20interface%20shell%20injection.md

17 Jun 2026 07:41Current

9.7Critical risk

Vulners AI Score9.7

CVSS 3.14.3 - 9.8

EPSS0.20403

SSVC

gl-inet vulnerability endpoint json data directory traversal unauthenticated attackers arbitrary code insecure permissions