Vulnerability · Published Apr 9, 2026 · Assigned by VulDB

CVE-2026-5959GL.iNet GL-RM1/GL-RM10/GL-RM10RC/GL-RM1PE Factory Reset improper authentication

Medium 6.6

In plain English

A medium-severity improper authentication in GL-RM1 from GL.iNet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS 3.1)6.6Medium

Exploit odds (30 days)0.5%top 55.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1. Affected by this issue is some unknown functionality of the component Factory Reset Handler. Performing a manipulation results in improper authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 1.8.2 can resolve this issue. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Affected products (as reported)

Vendor	Product	Versions
GL.iNet	GL-RM1	1.8.1
GL.iNet	GL-RM10	1.8.1
GL.iNet	GL-RM10RC	1.8.1
GL.iNet	GL-RM1PE	1.8.1

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:X/RL:O/RC:C

References

VDB-356512 | GL.iNet GL-RM1/GL-RM10/GL-RM10RC/GL-RM1PE Factory Reset improper authentication vdb-entry
VDB-356512 | CTI Indicators (IOB, IOC) signature, permissions-required
Submit #786688 | GL.iNet KVM 1.8.1 Access Authentication Bypass third-party-advisory
https://github.com/gl-inet/CVE-issues/blob/main/KVM/1.8.1/Remote%20Access%20Authentication%20Bypass%20After%20Factory%20Reset.md related
https://dl.gl-inet.com/kvm/ patch