Skip to content
Threat Feed
Subscribe

Vendor

GL.iNet

1 brief RSS
high advisory

Remote Command Injection in GL.iNet GL-MT3000 Firmware

A command injection vulnerability in the Logread Lua RPC plugin of GL.iNet GL-MT3000 firmware versions 4.4.5 and earlier allows authenticated remote attackers to execute arbitrary system commands via the module argument.

GL-MT3000 remote-code-execution command-injection cve-2026-18598 iot-security cve-2026-18599 router rce
1r 3t 1c