Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

GL-MT3000 — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in GL-MT3000, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known vulnerabilities for the GL-MT3000 router, specifically tracking Common Weakness Enumeration (CWE) entries associated with this specific hardware model. It serves as a centralized reference for security researchers, system administrators, and enterprise IT teams to monitor the security posture of this device throughout its lifecycle. The content collected herein encompasses a wide variety of vulnerability classes, including but not limited to authentication bypasses, buffer overflows, cross-site scripting, and improper access control issues that may affect the firmware or underlying operating system components. The database covers vulnerability disclosures and advisories ranging from the product's initial market release up to the most recent updates, ensuring a comprehensive historical view of identified security flaws. Readers can utilize this resource to track vendor-specific advisories issued by the manufacturer, understand the technical context and impact of specific weakness classes as they apply to this device, and look up the complete vulnerability history to assess risk exposure over time. This information is critical for prioritizing patch deployment and conducting targeted security assessments. By consolidating disparate sources into a single view, this page facilitates a more efficient response to emerging threats. It does not provide remediation steps but rather acts as a factual record of identified issues to aid in informed decision-making regarding device security and network protection strategies.

Vendor: GL.iNet

CVE ID Title CVSS Severity Published
CVE-2026-18686 GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection CWE-77 9.8 Critical 2026-08-04
CVE-2026-18685 GL.iNet GL-MT3000 modem.so glc set_upgrade command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18684 GL.iNet GL-MT3000 modem.so glc remove_profile command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18616 GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18615 GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18614 GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18613 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection CWE-74 9.8 Critical 2026-08-03
CVE-2026-18612 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18602 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18601 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18600 GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection CWE-77 8.8 High 2026-08-03
CVE-2026-18599 GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection CWE-77 8.0 High 2026-08-03
CVE-2026-18598 GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection CWE-77 8.8 High 2026-08-03
CVE-2026-12187 GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection CWE-77 8.8 High 2026-06-14
CVE-2026-12186 GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection CWE-77 8.8 High 2026-06-14
CVE-2026-11452 GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection CWE-77 7.3 High 2026-06-07
CVE-2026-11451 GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection CWE-77 7.3 High 2026-06-07
CVE-2026-11450 GL.iNet GL-MT3000 Path Normalization dlopen command injection CWE-77 7.3 High 2026-06-07
CVE-2026-11449 GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection CWE-77 6.3 Medium 2026-06-07
CVE-2026-11448 GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection CWE-77 4.7 Medium 2026-06-07
CVE-2026-11447 GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection CWE-77 6.3 Medium 2026-06-07

All 21 known CVE vulnerabilities affecting GL-MT3000 with full Chinese analysis, references, and POCs where available.