Skip to content
Threat Feed
Subscribe

Vendor

GL-INet

1 brief RSS
critical advisory

Remote Command Injection in GL-iNet GL-MT3000 Firmware

A critical command injection vulnerability in the GL-iNet GL-MT3000 router firmware (up to 4.4.5) allows remote, unauthenticated attackers to execute arbitrary commands via the /cgi-bin/glc binary.

PoC GL-MT3000 +1 cve-2026-18612 remote-code-execution command-injection router cve-2026-18614 network-device rce network-security +1
2r 2t 5c 1i