Cpe:2.3:a:gl_inet:gl_mt3000_4_4_5:*:*:*:*:*:*:*:*

A command injection vulnerability (CVE-2026-11452) has been discovered in GL.iNet GL-MT3000 routers running firmware versions up to 4.4.5, allowing remote attackers to execute arbitrary commands by manipulating the 'Password' argument in the '/cgi-bin/glc' endpoint.