This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-18599 | BDVDB-2026-354765 Detail

GL.iNetGL-MT3000

Description#

A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.set_config of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plugin. This manipulation of the argument record_size causes command injection. The exploit has been published and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: adjacent.

Weaknesses#

  • CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
  • CWE-74 Injection

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.