CVE-2026-26793

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the setconfig function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

CVE-2026-26793

GL-iNet GL-AR300M16 firmware v4.3.11 is affected by a command-injection in the set_config function. The vulnerability allows an attacker to execute arbitrary commands via crafted input received over the network, with CVSS v3.1 base score 9.8 (CRITICAL), and impacts Confidentiality, Integrity, and...