Tag

Cve-2026-18601

1 brief RSS

Remote Command Injection in GL.iNet GL-MT3000 Firmware

A command injection vulnerability in the Logread Lua RPC plugin of GL.iNet GL-MT3000 firmware versions 4.4.5 and earlier allows authenticated remote attackers to execute arbitrary system commands via the module argument.

GL-MT3000 remote-code-execution command-injection cve-2026-18598 iot-security cve-2026-18599 router rce cve-2026-18601 +1

2r 5t 1c 3h ago