CVE-2026-26793

all versions

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function. This vulnerab

9.8CRITICAL

CVE-2026-26795

all versions

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_syst

9.8CRITICAL

CVE-2026-26794

all versions

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add_group() function. This vulnerabili

8.8HIGH

CVE-2026-26792

all versions

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via t

9.8CRITICAL

CVE-2026-26791

all versions

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enabl

9.8CRITICAL

CVE-2024-45263

all versions

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upload interf

8.8HIGH

CVE-2024-45262

all versions

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The params parame

8.8HIGH

CVE-2024-45261

all versions

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The SID generated

8.0HIGH

CVE-2024-45260

all versions

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong

8.0HIGH

CVE-2024-45259

all versions

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. By intercepting a

6.5MEDIUM

CVE-2024-28077

all versions

A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect devices exposed to the external netw

7.5HIGH

CVE-2024-39229

all versions

An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX180

5.3MEDIUM

CVE-2024-39227

all versions

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300

9.8CRITICAL

CVE-2024-39228

all versions

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300

9.8CRITICAL

CVE-2024-39226

all versions

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300

9.8CRITICAL

CVE-2024-39225

all versions

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300

9.8CRITICAL

CVE-2024-27356

all versions

An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining

7.5HIGH