Login Request a demo
GL
Product
GL-MT3000
by GL.iNet · last CVE Aug 4, 2026
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities34In the news0Timeline
Severity mix
Critical 15High 14Medium 5Low 0
Severity
All severities34Critical15High14Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add GL-MT3000 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18686
9.8
5%
Aug 4
GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-18685
9.8
4%
Aug 3
GL.iNet GL-MT3000 modem.so glc set_upgrade command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-18684
9.8
4%
Aug 3
GL.iNet GL-MT3000 modem.so glc remove_profile command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-18616
9.8
4%
Aug 3
GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-18615
9.8
4%
Aug 3
GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-18614
9.8
4%
Aug 3
GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-18613
9.8
1%
Aug 3
GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-18612
9.8
4%
Aug 3
GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-18602
9.8
4%
Aug 3
GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-18601
9.8
4%
Aug 3
GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2023-50919
9.8
48%
Jan 12
An issue was discovered on GL.iNet devices before version 4.5.0
Affected: 4.3.7; 4.4.6
CVE-2023-50921
9.8
1%
Jan 3
An issue was discovered on GL.iNet devices through 4.5.0
Affected: 4.4.6
CVE-2023-31475
9.8
14%
May 11
An issue was discovered on GL.iNet devices before 3.216
Affected: before 3.216
CVE-2023-31471
9.8
1%
May 10
An issue was discovered on GL.iNet devices before 3.216
Affected: before 3.216
CVE-2023-29778
9.8
16%
May 2
GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread
Affected: 4.1.0
CVE-2026-18600
8.8
3%
Aug 3
GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-18598
8.8
3%
Aug 3
GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-12187
8.8
2%
Jun 14
GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-12186
8.8
2%
Jun 14
GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-18599
8.0
4%
Aug 3
GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2023-50445
7.8
9%
Dec 28
Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7, AR750S v4.3.7,…
Affected: 4.4.6
CVE-2023-31477
7.5
1%
May 11
A path traversal issue was discovered on GL.iNet devices before 3.216
Affected: before 3.216
CVE-2023-31474
7.5
1%
May 9
An issue was discovered on GL.iNet devices before 3.216
Affected: before 3.216
CVE-2023-31472
7.5
20%
May 9
An issue was discovered on GL.iNet devices before 3.216
Affected: before 3.216
CVE-2023-31478
7.5
30%
May 9
An issue was discovered on GL.iNet devices before 3.216
Affected: before 3.216
CVE-2026-11452
7.3
2%
Jun 7
GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2026-11451
7.3
2%
Jun 7
GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection
Affected: 4.4.5
CVE-2026-11450
7.3
2%
Jun 7
GL.iNet GL-MT3000 Path Normalization dlopen command injection
Affected: 4.4.5
CVE-2023-50922
7.2
1%
Jan 3
An issue was discovered on GL.iNet devices through 4.5.0
Affected: 4.4.6
CVE-2026-11449
6.3
1%
Jun 7
GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection
Affected: 4.4.5
CVE-2026-11447
6.3
1%
Jun 7
GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
CVE-2023-50920
5.5
0%
Jan 12
An issue was discovered on GL.iNet devices before version 4.5.0
Affected: 4.3.7; 4.4.6
CVE-2023-31473
4.9
4%
May 11
An issue was discovered on GL.iNet devices before 3.216
Affected: before 3.216
CVE-2026-11448
4.7
2%
Jun 7
GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection
Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5
Showing 34