CVE-2026-18615

creationtimestamp| type| source ---|---|--- 2026-08-03 18:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms76fkoadk22...

CVE-2026-18615 GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection

A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the function wg-server.generatepublickey of the file /cgi-bin/glc of the component wg-server.so Native Plugin. Executing a manipulation of the argument privatekey can lead to command injection. The attack may...