Skip to content
Noroxi

GL-iNet records

57 published records for vendor gl-inet.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 3.5%
Pre-auth RCE
13
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24
  6. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

57 records
  • CVE-2023-50919
    53Plan

    An issue was discovered on GL.iNet devices before version 4.5.0.

    CriticalCVSS 9.8WeaponizedEPSS 48%

    gl-inet · gl-ax1800 firmwareJan 12, 2024

  • CVE-2023-46456
    46Plan

    In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload fu

    CriticalCVSS 9.8No exploitEPSS 25%

    gl-inet · gl-ar300m firmwareDec 12, 2023

  • CVE-2023-46454
    46Plan

    In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the p

    CriticalCVSS 9.8Proof of conceptEPSS 23%

    gl-inet · gl-ar300m firmwareDec 12, 2023

  • CVE-2024-39226
    45Plan

    GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,

    CriticalCVSS 9.8No exploitEPSS 20%

    gl-inet · mt6000 firmwareAug 6, 2024

  • CVE-2023-46455
    44Plan

    In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN cli

    HighCVSS 7.5Proof of conceptEPSS 47%

    gl-inet · gl-ar300m firmwareDec 12, 2023

  • CVE-2023-29778
    44Plan

    GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.

    CriticalCVSS 9.8No exploitEPSS 16%

    gl-inet · gl-mt3000 firmwareMay 2, 2023

  • CVE-2024-39225
    43Plan

    GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,

    CriticalCVSS 9.8No exploitEPSS 14%

    gl-inet · mt6000 firmwareAug 6, 2024

  • CVE-2023-31475
    43Plan

    An issue was discovered on GL.iNet devices before 3.216.

    CriticalCVSS 9.8No exploitEPSS 14%

    gl-inet · gl-s20 firmwareMay 11, 2023

  • CVE-2023-47464
    42Plan

    Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via the u

    HighCVSS 8.8Proof of conceptEPSS 23%

    gl-inet · gl-ax1800 firmwareNov 30, 2023

  • CVE-2026-26792
    40Plan

    GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_u

    CriticalCVSS 9.8No exploitEPSS 4%

    gl-inet · ar300m16 firmwareMar 12, 2026

  • CVE-2026-26793
    40Plan

    GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function.

    CriticalCVSS 9.8No exploitEPSS 4%

    gl-inet · ar300m16 firmwareMar 12, 2026

  • CVE-2026-26795
    40Plan

    GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log fun

    CriticalCVSS 9.8No exploitEPSS 4%

    gl-inet · ar300m16 firmwareMar 12, 2026

  • CVE-2026-26791
    40Plan

    GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_ser

    CriticalCVSS 9.8No exploitEPSS 4%

    gl-inet · ar300m16 firmwareMar 12, 2026

  • CVE-2023-31478
    39Monitor

    An issue was discovered on GL.iNet devices before 3.216.

    HighCVSS 7.5Proof of conceptEPSS 30%

    gl-inet · gl-s20 firmwareMay 9, 2023

  • CVE-2019-6272
    39Monitor

    Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitra

    HighCVSS 8.8Proof of conceptEPSS 13%

    gl-inet · gl-ar300m-lite firmwareMar 21, 2019

  • CVE-2019-6275
    39Monitor

    Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbi

    HighCVSS 8.8Proof of conceptEPSS 13%

    gl-inet · gl-ar300m-lite firmwareMar 21, 2019

  • CVE-2023-47462
    39Monitor

    Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary code via the file shar

    CriticalCVSS 9.8No exploitEPSS 1%

    gl-inet · gl-ax1800 firmwareNov 29, 2023

  • CVE-2023-47463
    39Monitor

    Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a cra

    CriticalCVSS 9.8No exploitEPSS 1%

    gl-inet · gl-ax1800 firmwareNov 30, 2023

  • CVE-2024-39227
    39Monitor

    GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,

    CriticalCVSS 9.8No exploitEPSS 1%

    gl-inet · mt6000 firmwareAug 6, 2024

  • CVE-2023-31471
    39Monitor

    An issue was discovered on GL.iNet devices before 3.216.

    CriticalCVSS 9.8No exploitEPSS 1%

    gl-inet · gl-s20 firmwareMay 10, 2023

  • CVE-2024-39228
    39Monitor

    GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,

    CriticalCVSS 9.8No exploitEPSS 1%

    gl-inet · mt6000 firmwareAug 6, 2024

  • CVE-2023-50921
    39Monitor

    An issue was discovered on GL.iNet devices through 4.5.0.

    CriticalCVSS 9.8No exploitEPSS 1%

    gl-inet · gl-mt1300 firmwareJan 3, 2024

  • CVE-2019-6274
    38Monitor

    Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspec

    HighCVSS 8.8Proof of conceptEPSS 11%

    gl-inet · gl-ar300m-lite firmwareMar 21, 2019

  • CVE-2024-27356
    37Monitor

    An issue was discovered on certain GL-iNet devices.

    HighCVSS 7.5Proof of conceptEPSS 24%

    gl-inet · mt6000 firmwareFeb 26, 2024

  • CVE-2026-32292
    37Monitor

    GL-iNet Comet (GL-RM1) KVM insufficient login rate-limiting

    CriticalCVSS 9.3No exploitEPSS 1%

    gl-inet · comet gl-rm1 firmwareMar 17, 2026