CVE-2026-18612

CRITICO 9.8CVE-2026-18612 · Published 03/08/2026 · updated 23/10/2026

In breve

CVE-2026-18612 è una vulnerabilità CRITICO (CVSS 9.8).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.0%, superiore al 90.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function plugins.remove_package/plugins.install_package of the file /cgi-bin/glc of the component plugins.so Native Plugin. This manipulation causes command injection. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free