Tag

Cve-2026-18686

2 briefs RSS

Remote Command Injection Vulnerability in GL.iNet GL-MT3000

A critical command injection vulnerability in the nas-web RPC Wrapper of GL.iNet GL-MT3000 routers allows unauthenticated remote attackers to execute arbitrary system commands via the /cgi-bin/glc interface.

GL-MT3000 cve-2026-18686 command-injection iot rce

2t 1c 1i Aug 4, 2026

critical advisory

Remote Command Injection in GL.iNet GL-MT3000

1 rule 3 TTPs 2 CVEs 2 IOCs

Multiple unauthenticated remote command injection vulnerabilities in the GL.iNet GL-MT3000 router allow arbitrary code execution via the /cgi-bin/glc component. Public exploit code is available; patch firmware immediately.

exploited GL-MT3000 cve rce iot router cve-2026-18686 command-injection

1r 3t 2c 2i updated Aug 4, 2026