GL
Vendor
Gl-inet
893
CVEs
0
On KEV
0
New 30D
Products
GL9.8
GL-MT3000
GL.iNet
34 CVEs0 on KEV0 new
GF9.8
Gl-ax1800 Firmware
Gl-inet
21 CVEs0 on KEV0 new
AF9.8
Ar300m16 Firmware
Gl-inet
17 CVEs0 on KEV0 new
GF9.8
Gl-a1300 Firmware
Gl-inet
17 CVEs0 on KEV0 new
GF9.8
Gl-mt1300 Firmware
Gl-inet
17 CVEs0 on KEV0 new
AX9.8
AX1800
GL.iNet
15 CVEs0 on KEV0 new
GF9.8
Gl-ar300m Firmware
Gl-inet
15 CVEs0 on KEV0 new
GF9.8
Gl-ar750s Firmware
Gl-inet
14 CVEs0 on KEV0 new
GF9.8
Gl-axt1800 Firmware
Gl-inet
13 CVEs0 on KEV0 new
GF9.8
Gl-mt300n-v2 Firmware
Gl-inet
13 CVEs0 on KEV0 new
MT9.8
MT3000
GL.iNet
13 CVEs0 on KEV0 new
AF9.8
A1300 Firmware
Gl-inet
12 CVEs0 on KEV0 new
AF9.8
Ar300m Firmware
Gl-inet
12 CVEs0 on KEV0 new
AF9.8
Ar750 Firmware
Gl-inet
12 CVEs0 on KEV0 new
AF9.8
Ar750s Firmware
Gl-inet
12 CVEs0 on KEV0 new
AF9.8
Axt1800 Firmware
Gl-inet
12 CVEs0 on KEV0 new
BF9.8
B1300 Firmware
Gl-inet
12 CVEs0 on KEV0 new
GF9.8
Gl-ar750 Firmware
Gl-inet
12 CVEs0 on KEV0 new
GF9.8
Gl-b1300 Firmware
Gl-inet
12 CVEs0 on KEV0 new
GF9.8
Gl-mt2500 Firmware
Gl-inet
12 CVEs0 on KEV0 new
GF9.8
Gl-x3000 Firmware
Gl-inet
12 CVEs0 on KEV0 new
MF9.8
Mt1300 Firmware
Gl-inet
12 CVEs0 on KEV0 new
MF9.8
Mt2500 Firmware
Gl-inet
12 CVEs0 on KEV0 new
MF9.8
Mt300n-v2 Firmware
Gl-inet
12 CVEs0 on KEV0 new
MF9.8
Mt6000 Firmware
Gl-inet
12 CVEs0 on KEV0 new
SF9.8
Sft1200 Firmware
Gl-inet
12 CVEs0 on KEV0 new
XF9.8
X3000 Firmware
Gl-inet
12 CVEs0 on KEV0 new
XF9.8
X750 Firmware
Gl-inet
12 CVEs0 on KEV0 new
XF9.8
Xe300 Firmware
Gl-inet
12 CVEs0 on KEV0 new
XF9.8
Xe3000 Firmware
Gl-inet
12 CVEs0 on KEV0 new
XF9.8
X300b Firmware
Gl-inet
11 CVEs0 on KEV0 new
EF9.8
E750 Firmware
Gl-inet
10 CVEs0 on KEV0 new
MT8.3
MT6000
GL.iNet
10 CVEs0 on KEV0 new
MT8.3
MT2500
GL.iNet
9 CVEs0 on KEV0 new
MT8.3
MT3000
GL.iNet
9 CVEs0 on KEV0 new
A18.3
A1300
GL.iNet
8 CVEs0 on KEV0 new
AX8.3
AX1800
GL.iNet
8 CVEs0 on KEV0 new
AX8.3
AXT1800
GL.iNet
8 CVEs0 on KEV0 new
GF9.8
Gl-e750 Firmware
Gl-inet
8 CVEs0 on KEV0 new
GF9.8
Gl-mv1000 Firmware
Gl-inet
8 CVEs0 on KEV0 new
GF9.8
Gl-mv1000w Firmware
Gl-inet
8 CVEs0 on KEV0 new
X38.3
X3000
GL.iNet
8 CVEs0 on KEV0 new
XE8.3
XE3000
GL.iNet
8 CVEs0 on KEV0 new
GF9.8
Gl-ap1300 Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-ap1300lte Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-b2200 Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-mifi Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-mt2500a Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-s10 Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-s1300 Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-s20 Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-s200 Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-sf1200 Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-sft1200 Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-usb150 Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-x1200 Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-x300b Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-x750 Firmware
Gl-inet
7 CVEs0 on KEV0 new
GF9.8
Gl-xe300 Firmware
Gl-inet
7 CVEs0 on KEV0 new
MF9.8
Microuter-n300 Firmware
Gl-inet
7 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-19983 | MT MT2500 GL.iNet | 8.3 | Aug 17 | GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection |
| CVE-2026-19982 | MT MT6000 GL.iNet | 7.4 | Aug 17 | GL.iNet BE9300/MT6000 Firewall-management RPC os command injection |
| CVE-2026-19981 | MT MT5000 GL.iNet | 7.4 | Aug 17 | GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection |
| CVE-2026-19980 | MT MT6000 GL.iNet | 7.4 | Aug 17 | GL.iNet XE3000 Language Update ui.update_langs code injection |
| CVE-2026-19979 | AX AX1800 GL.iNet | 8.3 | Aug 17 | GL.iNet XE3000 WebDAV Service MOVE authorization |
| CVE-2026-18787 | AX AX1800 GL.iNet | 8.8 | Aug 4 | GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection |
| CVE-2026-18686 | GL GL-MT3000 GL.iNet | 9.8 | Aug 4 | GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection |
| CVE-2026-18685 | GL GL-MT3000 GL.iNet | 9.8 | Aug 3 | GL.iNet GL-MT3000 modem.so glc set_upgrade command injection |
| CVE-2026-18684 | GL GL-MT3000 GL.iNet | 9.8 | Aug 3 | GL.iNet GL-MT3000 modem.so glc remove_profile command injection |
| CVE-2026-18616 | GL GL-MT3000 GL-iNet | 9.8 | Aug 3 | GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection |
| CVE-2026-18615 | GL GL-MT3000 GL-iNet | 9.8 | Aug 3 | GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection |
| CVE-2026-18614 | GL GL-MT3000 GL-iNet | 9.8 | Aug 3 | GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection |
| CVE-2026-18613 | GL GL-MT3000 GL-iNet | 9.8 | Aug 3 | GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection |
| CVE-2026-18612 | GL GL-MT3000 GL-iNet | 9.8 | Aug 3 | GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection |
| CVE-2026-18602 | GL GL-MT3000 GL.iNet | 9.8 | Aug 3 | GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection |
| CVE-2026-18601 | GL GL-MT3000 GL.iNet | 9.8 | Aug 3 | GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection |
| CVE-2026-18600 | GL GL-MT3000 GL.iNet | 8.8 | Aug 3 | GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection |
| CVE-2026-18599 | GL GL-MT3000 GL.iNet | 8.0 | Aug 3 | GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection |
| CVE-2026-18598 | GL GL-MT3000 GL.iNet | 8.8 | Aug 3 | GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection |
| CVE-2026-18585 | BE BE9300 GL.iNet | 4.3 | Aug 3 | GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow |
| CVE-2026-18584 | X2 X2000 GL.iNet | 5.4 | Aug 3 | GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization |
| CVE-2026-12187 | GL GL-MT3000 GL.iNet | 8.8 | Jun 14 | GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection |
| CVE-2026-12186 | GL GL-MT3000 GL.iNet | 8.8 | Jun 14 | GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection |
| CVE-2026-11505 | X3 X3000 GL.iNet | 5.0 | Jun 8 | GL.iNet XE3000 glnassys hard-coded key |
| CVE-2026-11452 | GL GL-MT3000 GL.iNet | 7.3 | Jun 7 | GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection |
| CVE-2026-11451 | GL GL-MT3000 GL.iNet | 7.3 | Jun 7 | GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection |
| CVE-2026-11450 | GL GL-MT3000 GL.iNet | 7.3 | Jun 7 | GL.iNet GL-MT3000 Path Normalization dlopen command injection |
| CVE-2026-11449 | GL GL-MT3000 GL.iNet | 6.3 | Jun 7 | GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection |
| CVE-2026-11448 | GL GL-MT3000 GL.iNet | 4.7 | Jun 7 | GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection |
| CVE-2026-11447 | GL GL-MT3000 GL.iNet | 6.3 | Jun 7 | GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection |
| CVE-2026-11406 | MT MT3000 GL.iNet | 6.3 | Jun 6 | GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection |
| CVE-2026-5959 | GL GL-RM1 GL.iNet | 6.6 | Apr 9 | GL.iNet GL-RM1/GL-RM10/GL-RM10RC/GL-RM1PE Factory Reset improper authentication |
| CVE-2026-32293 | CK Comet KVM GL-iNet | 3.7 | Mar 17 | GL-iNet Comet (GL-RM1) KVM insufficient certificate validation |
| CVE-2026-32292 | CK Comet KVM GL-iNet | 7.5 | Mar 17 | GL-iNet Comet (GL-RM1) KVM insufficient login rate-limiting |
| CVE-2026-32291 | CK Comet KVM GL-iNet | 6.8 | Mar 17 | GL-iNet Comet (GL-RM1) KVM unauthenticated root access via UART serial console |
| CVE-2026-32290 | CK Comet KVM GL-iNet | 4.7 | Mar 17 | GL-iNet Comet (GL-RM1) KVM insufficient firmware verification |
| CVE-2026-26792 | AF Ar300m16 Firmware Gl-inet | 9.8 | Mar 12 | GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_url, target_version, current_version,… |
| CVE-2026-26793 | AF Ar300m16 Firmware Gl-inet | 9.8 | Mar 12 | GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function |
| CVE-2026-26795 | AF Ar300m16 Firmware Gl-inet | 9.8 | Mar 12 | GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function |
| CVE-2026-26794 | AF Ar300m16 Firmware Gl-inet | 8.8 | Mar 12 | GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add_group() function |
| CVE-2026-26791 | AF Ar300m16 Firmware Gl-inet | 9.8 | Mar 12 | GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_server function |
| CVE-2025-67090 | AF Ax1800 Firmware Gl-inet | 5.1 | Jan 8 | The LuCI web interface on Gl Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable |
| CVE-2025-67091 | AF Ax1800 Firmware Gl-inet | 6.5 | Jan 8 | An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable |
| CVE-2025-67089 | GF Gl-axt1800 Firmware Gl-inet | 8.1 | Jan 8 | A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8 |
| CVE-2025-44018 | GL GL-AXT1800 GL-Inet | 8.3 | Nov 24 | A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0 |
| CVE-2025-2851 | GB GL-MT1300 Beryl GL.iNet | 8.0 | Apr 26 | GL.iNet GL-A1300 Slate Plus RPC plugins.so buffer overflow |
| CVE-2025-2850 | GS GL-X3000 Spitz AX GL.iNet | 3.5 | Apr 26 | GL.iNet GL-A1300 Slate Plus Download Interface improper authorization |
| CVE-2025-2811 | GS GL-X3000 Spitz AX GL.iNet | 5.7 | Apr 26 | GL.iNet GL-A1300 Slate Plus API redos |
| CVE-2024-45263 | MF Mt2500 Firmware Gl-inet | 8.8 | Oct 24 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2 |
| CVE-2024-45262 | XF Xe300 Firmware Gl-inet | 8.8 | Oct 24 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2 |
| CVE-2024-45259 | AF Ar300m16 Firmware Gl-inet | 6.5 | Oct 24 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2 |
| CVE-2024-45261 | XF Xe300 Firmware Gl-inet | 8.0 | Oct 24 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2 |
| CVE-2024-45260 | AF Axt1800 Firmware Gl-inet | 8.0 | Oct 24 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2 |
| CVE-2024-28077 | MF Mt3000 Firmware Gl-inet | 7.5 | Aug 26 | A denial-of-service issue was discovered on certain GL-iNet devices |
| CVE-2024-39225 | NF N300 Firmware Gl-inet | 9.8 | Aug 6 | GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,… |
| CVE-2024-39229 | AF Ar300m Firmware Gl-inet | 5.3 | Aug 6 | An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750… |
| CVE-2024-39227 | AF Ap1300 Firmware Gl-inet | 9.8 | Aug 6 | GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,… |
| CVE-2024-39228 | AF Ap1300 Firmware Gl-inet | 9.8 | Aug 6 | GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,… |
| CVE-2024-39226 | MF Mt6000 Firmware Gl-inet | 9.8 | Aug 6 | GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12,… |
| CVE-2024-27356 | MF Mt3000 Firmware Gl-inet | 7.5 | Feb 27 | An issue was discovered on certain GL-iNet devices |
