CVE-2026-12187— GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-12187
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection
Source: NVD (National Vulnerability Database)
Vulnerability Description
A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknown functionality of the file /usr/bin/one_click_upgrade of the component Online Firmware Upgrade Handler. Such manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 4.7 addresses this issue. Upgrading the affected component is advised. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
GL-iNet gl-mt3000 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GL-iNet gl-mt3000是中国GL-iNet公司的一款便携式无线路由器。 GL-iNet gl-mt3000 4.4.5及之前版本存在安全漏洞，该漏洞源于Online Firmware Upgrade Handler组件文件/usr/bin/one_click_upgrade存在未知功能，容易受到命令注入攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-12187
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCVerified env Premium
Qwen3.6-35B-A3B · 13884 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-12187
请登录查看更多情报信息。
Other References for CVE-2026-12187 (1)
Other References for CVE-2026-12187 (1)
IV. Related Vulnerabilities
Same product: GL-MT3000
- CVE-2026-12186
GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replac - CVE-2026-11452
GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command inje - CVE-2026-11451
GL.iNet GL-MT3000 FTP Protocol glc snprintf command injectio - CVE-2026-11450
GL.iNet GL-MT3000 Path Normalization dlopen command injectio - CVE-2026-11449
GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injectio
Same vendor: GL.iNet
- CVE-2026-12186
GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replac - CVE-2026-11505
GL.iNet XE3000 glnassys hard-coded key - CVE-2026-11452
GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command inje - CVE-2026-11451
GL.iNet GL-MT3000 FTP Protocol glc snprintf command injectio - CVE-2026-11450
GL.iNet GL-MT3000 Path Normalization dlopen command injectio
Same weakness: CWE-77
- CVE-2026-15481
Trendnet TEW-635BRM IPoA WAN Connection Setup rc ipoa_test c - CVE-2025-6784
Code Engine <= 0.3.5 - Authenticated (Contributor+) Remote C - CVE-2026-59721
Hoppscotch: Admin RCE via MAILER_SMTP_URL nodemailer sendmai - CVE-2026-15035
bentoml OpenLLM Model Repository Directory Name common.py as - CVE-2026-9834
WP Database Backup <= 7.11 - Authenticated (Administrator+)
V. Comments for CVE-2026-12187
No comments yet