Skip to content
Threat Feed
Subscribe

Product

GL-MT3000

2 briefs RSS
critical threat

Remote Command Injection Vulnerability in GL.iNet GL-MT3000

A critical command injection vulnerability in the nas-web RPC Wrapper of GL.iNet GL-MT3000 routers allows unauthenticated remote attackers to execute arbitrary system commands via the /cgi-bin/glc interface.

GL-MT3000 cve-2026-18686 command-injection iot rce
2t 1c 1i
critical advisory

Remote Command Injection in GL.iNet GL-MT3000

Multiple unauthenticated remote command injection vulnerabilities in the GL.iNet GL-MT3000 router allow arbitrary code execution via the /cgi-bin/glc component. Public exploit code is available; patch firmware immediately.

exploited GL-MT3000 cve rce iot router cve-2026-18686 command-injection
1r 3t 2c 2i updated