G
Vendor security profile
gl-inet
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs24
Critical11
CISA KEV0
Public exploit17
Patch rate%8
Avg. CVSS7.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
21
0
0
CVE KEV
CVE severity distribution
24toplam CVE
Critical11 (46%)
High4 (17%)
Medium9 (38%)
Patch and exploitation view
%8
Verified patch
%0
CISA KEV
%71
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
22Unknown
Latest vulnerabilities
6.9
CVE-2026-19983
GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection
G
Patch status unknownEPSS %2
5.3
CVE-2026-19982
GL.iNet BE9300/MT6000 Firewall-management RPC os command injection
G
Patch status unknownEPSS %2
5.3
CVE-2026-19981
GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection
G
Patch status unknownEPSS %2
5.3
CVE-2026-19980
GL.iNet XE3000 Language Update ui.update_langs code injection
G
Patch verifiedEPSS %0
6.9
CVE-2026-19979
GL.iNet XE3000 WebDAV Service MOVE authorization
G
Patch status unknownEPSS %1
8.7
CVE-2026-18787
GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection
G
Patch status unknownEPSS %3
9.3
CVE-2026-18686
GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection
G
Patch status unknownEPSS %5
9.3
CVE-2026-18685
GL.iNet GL-MT3000 modem.so glc set_upgrade command injection
G
Patch verifiedEPSS %4
9.3
CVE-2026-18684
GL.iNet GL-MT3000 modem.so glc remove_profile command injection
G
Patch status unknownEPSS %4
9.3
CVE-2026-18616
GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection
G
Patch status unknownEPSS %4