Gl-Inet

63 CVEs across 136 Gl-Inet products. Browse Gl-Inet vulnerabilities, severities, and proof-of-concept exploits.

Gl-Inet products with known CVEs

ProductCVEs
Gl-Mt300023
Ar300m1617
Ar300m16 Firmware17
Gl-Ax180016
Gl-Ax1800 Firmware16
Gl-Ar300m15
Gl-Ar300m Firmware15
Ax180014
Ax1800 Firmware14
Gl-Ar750s14
Gl-Ar750s Firmware14
Gl-Axt180014
Gl-Axt1800 Firmware13
Gl-Mt3000 Firmware13
Gl-Mt300n-V213
Gl-Mt300n-V2 Firmware13
A130012
A1300 Firmware12
Ar300m12
Ar300m Firmware12
Ar75012
Ar750 Firmware12
Ar750s12
Ar750s Firmware12
Axt180012
Axt1800 Firmware12
B130012
B1300 Firmware12
Gl-A130012
Gl-A1300 Firmware12
Gl-Ar75012
Gl-Ar750 Firmware12
Gl-B130012
Gl-B1300 Firmware12
Gl-Mt130012
Gl-Mt1300 Firmware12
Gl-Mt250012
Gl-Mt2500 Firmware12
Mt130012
Mt1300 Firmware12
Mt250012
Mt2500 Firmware12
Mt3000 Firmware12
Mt300n-V212
Mt300n-V2 Firmware12
Mt600012
Mt6000 Firmware12
Sft120012
Sft1200 Firmware12
X300012
Gl-Inet CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-18616Critical9.82026-08-03A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.set_peer of the file /cgi-bin/glc of the component…
CVE-2026-18615Critical9.82026-08-03A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the function wg-server.generate_publickey of the file /cgi-bin/glc of…
CVE-2026-18614Critical9.82026-08-03A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the function s2s.enable_echo_server of the file /cgi-bin/glc of the component s2s.so Na…
CVE-2026-18613Critical9.82026-08-03A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.set_config of the file /cgi-bin/glc of the component p…
CVE-2026-18612Critical9.82026-08-03A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function plugins.remove_package/plugins.install_package of the file /cgi…
CVE-2026-32293Low3.72026-03-17The GL-iNet Comet (GL-RM1) KVM connects to a GL-iNet site during boot-up to provision client and CA certificates. The GL-RM1 does not verify certificates used…
CVE-2026-32292High7.52026-03-17The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.
CVE-2026-32291Medium6.82026-03-17The GL-iNet Comet (GL-RM1) KVM before 1.8.2 does not require authentication on the UART serial console. This attack requires physically opening the device and…
CVE-2026-32290Medium4.72026-03-17The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware files. An attacker-in-the-middle or a co…
CVE-2026-26793Critical9.82026-03-12GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function. This vulnerability allows attackers to exe…
CVE-2026-26795Critical9.82026-03-12GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function. This vulnera…
CVE-2026-26794High8.82026-03-12GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add_group() function. This vulnerability allows attackers to execut…
CVE-2026-26792Critical9.82026-03-12GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_url, target_version…
CVE-2026-26791Critical9.82026-03-12GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_server function. This…
CVE-2025-67091Medium6.52026-01-08An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6.4 & 4.6.8 in the GL.iNet custom opkg wrapper script located…
CVE-2025-67090Medium5.12026-01-08The LuCI web interface on Gl Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. Fix available in version 4.8.2 GL.Inet AX1800 Version 4.6.4 & 4.6.8 lack…
CVE-2025-67089High8.12026-01-08A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present in the `plugins.install_package` RPC me…
CVE-2025-44018High8.32025-11-24A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware dow…
CVE-2024-45263High8.82024-10-24An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upload interface allows the uploading of a…
CVE-2024-45262High8.82024-10-24An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The params parameter in the call method of the…
CVE-2024-45261High8.02024-10-24An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The SID generated for a specific user is not t…
CVE-2024-45260High8.02024-10-24An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong to unauthorized groups can in…
CVE-2024-45259Medium6.52024-10-24An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. By intercepting an HTTP request and changing t…
CVE-2024-28077High7.52024-08-26A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect devices exposed to the external network through DDNS, and consequ…
CVE-2024-39229Medium5.32024-08-06An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300…
CVE-2024-39227Critical9.82024-08-06GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E75…
CVE-2024-39228Critical9.82024-08-06GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E75…
CVE-2024-39226Critical9.82024-08-06GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E75…
CVE-2024-39225Critical9.82024-08-06GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E75…
CVE-2024-27356High7.52024-02-27An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. Th…
CVE-2023-50920Medium5.52024-01-12An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID after each user reboot, allowing attackers to share session id…
CVE-2023-50919Critical9.82024-01-12An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string pattern matching. This affects A1300 4…
CVE-2023-50921Critical9.82024-01-03An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the add_user interface in the system module to gain root privileges. This affect…
CVE-2023-50922High7.22024-01-03An issue was discovered on GL.iNet devices through 4.5.0. Attackers who are able to steal the AdminToken cookie can execute arbitrary code by uploading a cront…
CVE-2023-50445High7.82023-12-28Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7…
CVE-2023-46456Critical9.82023-12-12In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.
CVE-2023-46455High7.52023-12-12In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload fun…
CVE-2023-46454Critical9.82023-12-12In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information…
CVE-2023-47464High8.82023-11-30Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via the upload API function.
CVE-2023-47463Critical9.82023-11-30Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the…
CVE-2023-47462Critical9.82023-11-29Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary code via the file sharing function.
CVE-2023-24261High7.22023-06-21A vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to execute arbitrary code via a crafted POST request.
CVE-2023-33620Medium5.92023-06-13GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications which allows attackers to eavesdrop via a man-in-the-middle attack.
CVE-2023-33621Medium5.92023-06-13GL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request when the OpenVPN Server config file is downloaded. The token is…
CVE-2023-31475Critical9.82023-05-11An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a…
CVE-2023-31473Medium4.92023-05-11An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. Thi…
CVE-2023-31477High7.52023-05-11A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such a…
CVE-2023-31471Critical9.82023-05-10An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a rev…
CVE-2023-31478High7.52023-05-09An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key.
CVE-2023-31474High7.52023-05-09An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request…
CVE-2023-31472High7.52023-05-09An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. Thi…
CVE-2023-31476High7.52023-05-09An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an empty file can be created almost anywher…
CVE-2023-29778Critical9.82023-05-02GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.
CVE-2022-44212Medium5.92022-12-01In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel.
CVE-2022-44211High7.42022-12-01In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings.
CVE-2022-42055Medium6.52022-10-27Multiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 via the ping and traceroute tools allow att…
CVE-2022-42054Medium5.42022-10-27Multiple stored cross-site scripting (XSS) vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 allow attackers to execute…
CVE-2022-31898Medium6.82022-10-27gl-inet GL-MT300N-V2 Mango v3.212 and GL-AX1800 Flint v3.214 were discovered to contain multiple command injection vulnerabilities via the ping_addr and trace_…
CVE-2021-44148Medium6.12021-12-07GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an attacker creates an SSID with an XSS pay…
CVE-2019-6275High8.82019-03-21Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.
CVE-2019-6274High8.82019-03-21Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via di…
CVE-2019-6273Medium6.52019-03-21download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.
CVE-2019-6272High8.82019-03-21Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.