CVE-2026-18614

CVE-2026-18614 affects GL-iNet GL-MT3000 devices (firmware up to 4.4.5). The vulnerability lies in the s2s.so Native Plugin, specifically the function s2s.enable_echo_server in the file /cgi-bin/glc . An attacker can manipulate the port argument to trigger a command injection . The attack can be ...