EUVD-2026-12604

The GL-iNet Comet GL-RM1 KVM connects to a GL-iNet site during boot-up to provision client and CA certificates. The GL-RM1 does not verify certificates used for this connection, allowing an attacker-in-the-middle to serve invalid client and CA certificates. The GL-RM1 will attempt to use the...

PT-2026-25915

Name of the Vulnerable Software and Affected Versions GL-iNet Comet GL-RM1 KVM affected versions not specified Description The GL-iNet Comet GL-RM1 KVM connects to a GL-iNet site during startup to obtain client and CA certificates. The device does not validate the certificates used during this...