{"items":[{"id":"CVE-2026-19983","published":"2026-08-17T04:30:11.277Z","updated":"2026-08-17T15:29:21.838Z","title":"GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection","severity":"MEDIUM","score":6.9,"vendor":"GL.iNet","product":"A1300","kev":false,"epss":0.0206,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19982","published":"2026-08-17T04:15:08.101Z","updated":"2026-08-18T14:24:10.126Z","title":"GL.iNet BE9300/MT6000 Firewall-management RPC os command injection","severity":"MEDIUM","score":5.3,"vendor":"GL.iNet","product":"BE9300","kev":false,"epss":0.01768,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19981","published":"2026-08-17T04:00:11.538Z","updated":"2026-08-17T15:47:06.274Z","title":"GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection","severity":"MEDIUM","score":5.3,"vendor":"GL.iNet","product":"A1300","kev":false,"epss":0.01768,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19980","published":"2026-08-17T03:45:07.917Z","updated":"2026-08-19T14:51:26.467Z","title":"GL.iNet XE3000 Language Update ui.update_langs code injection","severity":"MEDIUM","score":5.3,"vendor":"GL.iNet","product":"A1300","kev":false,"epss":0.00393,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19979","published":"2026-08-17T03:30:09.125Z","updated":"2026-08-18T13:37:35.365Z","title":"GL.iNet XE3000 WebDAV Service MOVE authorization","severity":"MEDIUM","score":6.9,"vendor":"GL.iNet","product":"A1300","kev":false,"epss":0.00539,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18787","published":"2026-08-04T17:00:09.281Z","updated":"2026-08-04T17:19:14.440Z","title":"GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection","severity":"HIGH","score":8.7,"vendor":"GL.iNet","product":"AX1800","kev":false,"epss":0.03212,"kevAdded":null,"exploit":true},{"id":"CVE-2026-18686","published":"2026-08-04T00:00:12.184Z","updated":"2026-08-04T15:04:21.037Z","title":"GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection","severity":"CRITICAL","score":9.3,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.04731,"kevAdded":null,"exploit":true},{"id":"CVE-2026-18685","published":"2026-08-03T23:15:08.573Z","updated":"2026-08-04T14:19:21.884Z","title":"GL.iNet GL-MT3000 modem.so glc set_upgrade command injection","severity":"CRITICAL","score":9.3,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.03616,"kevAdded":null,"exploit":true},{"id":"CVE-2026-18684","published":"2026-08-03T22:45:10.214Z","updated":"2026-08-04T15:41:00.345Z","title":"GL.iNet GL-MT3000 modem.so glc remove_profile command injection","severity":"CRITICAL","score":9.3,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.03616,"kevAdded":null,"exploit":true},{"id":"CVE-2026-18602","published":"2026-08-03T15:30:08.800Z","updated":"2026-08-03T16:48:22.144Z","title":"GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection","severity":"CRITICAL","score":9.3,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.03616,"kevAdded":null,"exploit":true},{"id":"CVE-2026-18601","published":"2026-08-03T13:15:08.148Z","updated":"2026-08-03T19:58:12.505Z","title":"GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection","severity":"CRITICAL","score":9.3,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.03616,"kevAdded":null,"exploit":true},{"id":"CVE-2026-18600","published":"2026-08-03T13:00:10.440Z","updated":"2026-08-03T14:50:38.393Z","title":"GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection","severity":"HIGH","score":8.7,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.03212,"kevAdded":null,"exploit":true},{"id":"CVE-2026-18599","published":"2026-08-03T12:00:09.629Z","updated":"2026-08-03T15:37:07.260Z","title":"GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection","severity":"HIGH","score":8.6,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.04444,"kevAdded":null,"exploit":true},{"id":"CVE-2026-18598","published":"2026-08-03T11:30:10.152Z","updated":"2026-08-03T20:01:16.119Z","title":"GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection","severity":"HIGH","score":8.7,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.03212,"kevAdded":null,"exploit":true},{"id":"CVE-2026-18585","published":"2026-08-03T05:15:07.982Z","updated":"2026-08-03T13:21:10.843Z","title":"GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow","severity":"MEDIUM","score":5.3,"vendor":"GL.iNet","product":"MT3000","kev":false,"epss":0.00509,"kevAdded":null,"exploit":false},{"id":"CVE-2026-18584","published":"2026-08-03T04:45:07.095Z","updated":"2026-08-03T15:37:18.296Z","title":"GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization","severity":"MEDIUM","score":5.3,"vendor":"GL.iNet","product":"E5800","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-12187","published":"2026-06-14T22:00:09.360Z","updated":"2026-06-15T12:54:57.480Z","title":"GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection","severity":"HIGH","score":8.7,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.0194,"kevAdded":null,"exploit":true},{"id":"CVE-2026-12186","published":"2026-06-14T20:45:08.530Z","updated":"2026-06-15T19:25:36.498Z","title":"GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection","severity":"HIGH","score":8.7,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.01966,"kevAdded":null,"exploit":true},{"id":"CVE-2026-11505","published":"2026-06-08T10:15:09.229Z","updated":"2026-06-08T13:25:49.443Z","title":"GL.iNet XE3000 glnassys hard-coded key","severity":"LOW","score":2.3,"vendor":"GL.iNet","product":"A1300","kev":false,"epss":0.00197,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11452","published":"2026-06-07T03:15:10.332Z","updated":"2026-06-08T16:33:31.174Z","title":"GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection","severity":"MEDIUM","score":6.9,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.01849,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11451","published":"2026-06-07T03:00:14.858Z","updated":"2026-06-08T16:32:33.258Z","title":"GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection","severity":"MEDIUM","score":6.9,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.02229,"kevAdded":null,"exploit":true},{"id":"CVE-2026-11450","published":"2026-06-07T02:30:09.365Z","updated":"2026-06-08T15:30:18.217Z","title":"GL.iNet GL-MT3000 Path Normalization dlopen command injection","severity":"MEDIUM","score":6.9,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.01729,"kevAdded":null,"exploit":true},{"id":"CVE-2026-11449","published":"2026-06-07T02:15:08.735Z","updated":"2026-06-09T14:57:59.184Z","title":"GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection","severity":"MEDIUM","score":5.3,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.01212,"kevAdded":null,"exploit":true},{"id":"CVE-2026-11448","published":"2026-06-07T02:00:13.687Z","updated":"2026-06-08T15:25:48.355Z","title":"GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection","severity":"MEDIUM","score":5.1,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.0174,"kevAdded":null,"exploit":true},{"id":"CVE-2026-11447","published":"2026-06-07T01:15:09.614Z","updated":"2026-06-08T13:13:12.085Z","title":"GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection","severity":"MEDIUM","score":5.3,"vendor":"GL.iNet","product":"GL-MT3000","kev":false,"epss":0.0118,"kevAdded":null,"exploit":true},{"id":"CVE-2026-11406","published":"2026-06-06T09:15:12.019Z","updated":"2026-06-08T16:27:56.919Z","title":"GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection","severity":"MEDIUM","score":5.3,"vendor":"GL.iNet","product":"MT3000","kev":false,"epss":0.01353,"kevAdded":null,"exploit":true},{"id":"CVE-2026-5959","published":"2026-04-09T14:30:14.351Z","updated":"2026-04-13T20:01:57.939Z","title":"GL.iNet GL-RM1/GL-RM10/GL-RM10RC/GL-RM1PE Factory Reset improper authentication","severity":"HIGH","score":7.5,"vendor":"GL.iNet","product":"GL-RM1","kev":false,"epss":0.00518,"kevAdded":null,"exploit":false},{"id":"CVE-2025-2851","published":"2025-04-26T08:00:08.117Z","updated":"2025-04-28T18:09:44.918Z","title":"GL.iNet GL-A1300 Slate Plus RPC plugins.so buffer overflow","severity":"HIGH","score":8.6,"vendor":"GL.iNet","product":"GL-A1300 Slate Plus","kev":false,"epss":0.00404,"kevAdded":null,"exploit":false},{"id":"CVE-2025-2850","published":"2025-04-26T07:31:03.631Z","updated":"2025-04-28T18:09:52.772Z","title":"GL.iNet GL-A1300 Slate Plus Download Interface improper authorization","severity":"MEDIUM","score":5.1,"vendor":"GL.iNet","product":"GL-A1300 Slate Plus","kev":false,"epss":0.00219,"kevAdded":null,"exploit":false},{"id":"CVE-2025-2811","published":"2025-04-26T07:00:05.770Z","updated":"2025-04-28T18:09:59.404Z","title":"GL.iNet GL-A1300 Slate Plus API redos","severity":"MEDIUM","score":6.9,"vendor":"GL.iNet","product":"GL-A1300 Slate Plus","kev":false,"epss":0.00361,"kevAdded":null,"exploit":true}]}