Vulnerabilities in GL-Inet
10 resultsVexday analysis
GL-Inet apresenta apenas 1 vulnerabilidade registrada na base, sem exploração ativa confirmada ou severidade crítica. A fraqueza dominante refere-se a validação inadequada de certificados SSL/TLS (CWE-295), um risco de confiabilidade moderado que demanda atenção, mas não configura urgência imediata dado o volume reduzido de exposições.
CVE-2026-18612CRITICALGL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injectionEPSS 2.2%CVE-2026-18614CRITICALGL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injectionEPSS 2.0%CVE-2026-18616CRITICALGL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injectionEPSS 2.0%CVE-2026-18615CRITICALGL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injectionEPSS 2.0%CVE-2026-18613CRITICALGL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injectionEPSS 0.5%CVE-2026-32292CRITICALGL-iNet Comet (GL-RM1) KVM insufficient login rate-limitingEPSS 0.5%CVE-2026-32293MEDIUMGL-iNet Comet (GL-RM1) KVM insufficient certificate validationEPSS 0.3%CVE-2026-32291HIGHGL-iNet Comet (GL-RM1) KVM unauthenticated root access via UART serial consoleEPSS 0.3%CVE-2025-44018HIGHA firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can leaEPSS 0.3%CVE-2026-32290HIGHGL-iNet Comet (GL-RM1) KVM insufficient firmware verificationEPSS 0.2%