Login Request a demo
XE
Product
XE3000
by GL.iNet · last CVE Aug 17, 2026
8
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 5Medium 3Low 0
Severity
All severities8Critical0High5Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add XE3000 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-19983
8.3
2%
Aug 17
GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection
Affected: 4.8.*
CVE-2026-19979
8.3
1%
Aug 17
GL.iNet XE3000 WebDAV Service MOVE authorization
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +3 more
CVE-2024-27356
7.5
24%
Feb 27
An issue was discovered on certain GL-iNet devices
Affected: 4.4.4
CVE-2026-19981
7.4
2%
Aug 17
GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +3 more
CVE-2026-19980
7.4
0%
Aug 17
GL.iNet XE3000 Language Update ui.update_langs code injection
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +3 more
CVE-2026-18584
5.4
0%
Aug 3
GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization
Affected: 20260707
CVE-2026-11505
5.0
0%
Jun 8
GL.iNet XE3000 glnassys hard-coded key
Affected: 4.8.*
CVE-2026-18585
4.3
1%
Aug 3
GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow
Affected: 20260707
Showing 8