CVE-2026-18598

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.getsystemlog of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC plugin. The manipulation of the argument module results in command injection. The attack can be...

CVE-2026-18599

A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.setconfig of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plugin. This manipulation of the argument recordsize causes command injection. The exploit has been published...

CVE-2026-18600 GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...

CVE-2026-18600

GL.iNet GL-MT3000 devices (firmware up to 4.4.5) are affected by a vulnerability in the Network Lua RPC Plugin, specifically in network.switch_info/network.switch_status in /usr/lib/oui-httpd/rpc/network. Manipulating the switch argument enables remote command injection. The exploit has been publ...

EUVD-2026-52267

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...

CVE-2026-18600

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...

CVE-2026-18599 GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection

A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.setconfig of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plugin. This manipulation of the argument recordsize causes command injection. The exploit has been published...

CVE-2026-18599

GL.iNet GL-MT3000 (up to 4.4.5) is affected by a vulnerability in the Logread Lua RPC Plugin, specifically the logread.set_config function in /usr/lib/oui-httpd/rpc/logread, where manipulation of the record_size argument allows command injection. The flaw, confirmed in the Logread Lua RPC Plugin,...

CVE-2026-18598

Technical details (affected version range, specific vulnerable component behavior, exploit vectors) are not publicly available in the provided documents. Monitor for updates from vendor or security advisories.

CVE-2026-18598 GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.getsystemlog of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC plugin. The manipulation of the argument module results in command injection. The attack can be...

CVE-2026-18598

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.getsystemlog of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC plugin. The manipulation of the argument module results in command injection. The attack can be...

PT-2026-67388

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.get system log of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC plugin. The manipulation of the argument module results in command injection. The attack can be...

PT-2026-67389

A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.set config of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plugin. This manipulation of the argument record size causes command injection. The exploit has been publishe...