CVE-2026-18685
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk79th percentile - higher than 79% of all known CVEs
Summary
A security vulnerability has been detected in GL.iNet GL-MT3000 up to version 4.4.5. It affects the set_upgrade function in the /cgi-bin/glc file of the modem.so component. Such manipulation leads to command injection, and the attack can be launched remotely. The exploit has been publicly disclosed and may be used.
Risk Assessment
Risk of remote unauthorized command execution, potentially allowing device takeover or disruption of services.
Recommendation
Update the firmware to a version newer than 4.4.5 and monitor logs for suspicious activity.
Original NVD description (English source)
A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function set_upgrade of the file /cgi-bin/glc of the component modem.so. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.