Log in Start free

Vulnerability · Published Jun 8, 2026 · Assigned by VulDB

CVE-2026-11505GL.iNet XE3000 glnassys hard-coded key

Medium 5.0

In plain English

A medium-severity security flaw in A1300 from GL.iNet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.1)5.0Medium
Exploit odds (30 days)0.2%top 90.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This affects an unknown function of the component glnassys. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is reported as difficult. Upgrading to version 4.9.0 mitigates this issue. Upgrading the affected component is advised.

Affected products (as reported)

VendorProductVersions
GL.iNet A1300 4.8.*
GL.iNet AX1800 4.8.*
GL.iNet AXT1800 4.8.*
GL.iNet MT2500 4.8.*
GL.iNet MT3000 4.8.*
GL.iNet MT6000 4.8.*
GL.iNet X3000 4.8.*
GL.iNet XE3000 4.8.*

Weakness: CWE-321, CWE-320 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C

References