Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GL-MT3000 — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in GL-MT3000, with AI-generated Chinese analysis, references, and POCs.

This page documents security weaknesses affecting the GL-MT3000 router, categorized under common vulnerability types and associated tags for systematic tracking. It aggregates a comprehensive collection of known vulnerabilities reported for this specific hardware model, covering incidents discovered and disclosed from the initial release of the device up to the most recent security updates provided by the vendor. By consulting this resource, users and security professionals can effectively track a vendor's advisories to stay informed about critical patches and mitigation strategies. The page also helps users understand a specific weakness class by providing context on how these flaws manifest within the device’s architecture, such as in its firmware or network services. Additionally, it allows stakeholders to look up a product's vulnerability history, offering a chronological view of past security incidents and their resolution status. This centralized approach ensures that administrators can quickly assess the security posture of their GL-MT3000 units, enabling them to prioritize remediation efforts based on severity and relevance. The data presented is sourced from official vendor announcements and verified security databases, ensuring accuracy and reliability for decision-making purposes.

Vendor: GL.iNet

CVE ID Title CVSS Severity Published
CVE-2026-18686 GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection CWE-77 9.8 Critical 2026-08-04
CVE-2026-18685 GL.iNet GL-MT3000 modem.so glc set_upgrade command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18684 GL.iNet GL-MT3000 modem.so glc remove_profile command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18616 GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18615 GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18614 GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18613 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection CWE-74 9.8 Critical 2026-08-03
CVE-2026-18612 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18602 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18601 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection CWE-77 9.8 Critical 2026-08-03
CVE-2026-18600 GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection CWE-77 8.8 High 2026-08-03
CVE-2026-18599 GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection CWE-77 8.0 High 2026-08-03
CVE-2026-18598 GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection CWE-77 8.8 High 2026-08-03
CVE-2026-12187 GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection CWE-77 8.8 High 2026-06-14
CVE-2026-12186 GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection CWE-77 8.8 High 2026-06-14
CVE-2026-11452 GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection CWE-77 7.3 High 2026-06-07
CVE-2026-11451 GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection CWE-77 7.3 High 2026-06-07
CVE-2026-11450 GL.iNet GL-MT3000 Path Normalization dlopen command injection CWE-77 7.3 High 2026-06-07
CVE-2026-11449 GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection CWE-77 6.3 Medium 2026-06-07
CVE-2026-11448 GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection CWE-77 4.7 Medium 2026-06-07
CVE-2026-11447 GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection CWE-77 6.3 Medium 2026-06-07

All 21 known CVE vulnerabilities affecting GL-MT3000 with full Chinese analysis, references, and POCs where available.