What’s Vulnerable › Products

GL.iNet GL-MT3000 vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.

Check whether your GL.iNet GL-MT3000 version is affected

Latest GL.iNet GL-MT3000 vulnerabilities

• CVE-2026-18686 — GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection (CVSS 9.8)
• CVE-2026-18685 — GL.iNet GL-MT3000 modem.so glc set_upgrade command injection (CVSS 9.8)
• CVE-2026-18684 — GL.iNet GL-MT3000 modem.so glc remove_profile command injection (CVSS 9.8)
• CVE-2026-18602 — GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection (CVSS 9.8)
• CVE-2026-18601 — GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection (CVSS 9.8)
• CVE-2026-18600 — GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection (CVSS 8.8)
• CVE-2026-18599 — GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection (CVSS 8.0)
• CVE-2026-18598 — GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection (CVSS 8.8)
• CVE-2026-12187 — GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection (CVSS 8.8)
• CVE-2026-12186 — GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection (CVSS 8.8)
• CVE-2026-11452 — GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection (CVSS 7.3)
• CVE-2026-11451 — GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection (CVSS 7.3)
• CVE-2026-11450 — GL.iNet GL-MT3000 Path Normalization dlopen command injection (CVSS 7.3)
• CVE-2026-11449 — GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection (CVSS 6.3)
• CVE-2026-11448 — GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection (CVSS 4.7)
• CVE-2026-11447 — GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection (CVSS 6.3)