CVE-2025-44018

Severity: high (CVSS 8.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-11-24 · updated 2026-10-08
Weakness: CWE-295

Description

A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

Affected products

GL-Inet GL-AXT1800: 4.7.0

References

https://talosintelligence.com/vulnerability_reports/TALOS-2025-2230
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2230

Get alerted when CVE-2025-44018 or the next vulnerability affects your stack