CVE-2026-18598

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.getsystemlog of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC plugin. The manipulation of the argument module results in command injection. The attack can be...

CVE-2023-46456

In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality...

CVE-2023-46455

In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload functionality...

PT-2025-17955 · Gl.Inet · Gl.Inet Router Firmware

Name of the Vulnerable Software and Affected Versions: GL.iNet router firmware versions 4.x Description: A vulnerability was found in the Download Interface component of the GL.iNet router firmware, affecting some unknown processing. The manipulation leads to improper authorization...

GL.iNet Router security vulnerabilities

GL.iNet Router is a series of routers from China's Guanglian Zhitong GL.iNet company. A security vulnerability exists in GL.iNet Router that originates from improper authorization of the download interface component...