What’s Vulnerable › Products

GL.iNet XE3000 vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your GL.iNet XE3000 version is affected

Latest GL.iNet XE3000 vulnerabilities

• CVE-2026-19983 — GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection (CVSS 8.3)
• CVE-2026-19981 — GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection (CVSS 7.4)
• CVE-2026-19980 — GL.iNet XE3000 Language Update ui.update_langs code injection (CVSS 7.4)
• CVE-2026-19979 — GL.iNet XE3000 WebDAV Service MOVE authorization (CVSS 8.3)
• CVE-2026-18585 — GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow (CVSS 4.3)
• CVE-2026-18584 — GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization (CVSS 5.4)
• CVE-2026-11505 — GL.iNet XE3000 glnassys hard-coded key (CVSS 5.0)