GL-Inet GL-MT3000

• CVE-2026-18686 Critical 9.8 GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection 4.7%
• CVE-2026-18685 Critical 9.8 GL.iNet GL-MT3000 modem.so glc set_upgrade command injection 3.6%
• CVE-2026-18684 Critical 9.8 GL.iNet GL-MT3000 modem.so glc remove_profile command injection 3.6%
• CVE-2026-18616 Critical 9.8 GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection 3.6%
• CVE-2026-18615 Critical 9.8 GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection 3.6%
• CVE-2026-18614 Critical 9.8 GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection 3.6%
• CVE-2026-18613 Critical 9.8 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection 1.0%
• CVE-2026-18612 Critical 9.8 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection 4.0%
• CVE-2026-18602 Critical 9.8 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection 3.6%
• CVE-2026-18601 Critical 9.8 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection 3.6%
• CVE-2026-18600 High 8.8 GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection 3.2%
• CVE-2026-18599 High 8.0 GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection 4.4%
• CVE-2026-18598 High 8.8 GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection 3.2%
• CVE-2026-12187 High 8.8 GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection 1.9%
• CVE-2026-12186 High 8.8 GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection 2.0%
• CVE-2026-11452 High 7.3 GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection 1.8%
• CVE-2026-11451 High 7.3 GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection 2.2%
• CVE-2026-11450 High 7.3 GL.iNet GL-MT3000 Path Normalization dlopen command injection 1.7%
• CVE-2026-11449 Medium 6.3 GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection 1.2%
• CVE-2026-11448 Medium 4.7 GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection 1.7%
• CVE-2026-11447 Medium 6.3 GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection 1.2%