CVE Tools
Track your stack

Gl-inet

40 CVEs tracked since 2022. Since Oct 2022, none of them reached CISA KEV.

Gl-inet CVEs per month

Oct 2022 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Gl-inet CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2022-1030
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-0590
2023-064 or fewer
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-1240
2024-0140
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-0860
2024-093 or fewer
2024-1050
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-0390
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Gl-inet's monthly top three, with their CVEs summed over those months.

  1. AR300M16 Firmware163 months
  2. A1300 Firmware112 months
  3. Gl-ar300m Firmware82 months
  4. Gl-mt3000 Firmware81 month
  5. Gl-mv1000 Firmware81 month
  6. Gl-mv1000w Firmware81 month
  7. XE300 Firmware61 month
  8. AR300M Firmware51 month
  9. Comet Gl-rm1 Firmware41 month
  10. Comet Kvm41 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Gl-inet.

  1. CVE-2026-18616GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection9.8
  2. CVE-2026-18615GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection9.8
  3. CVE-2026-18614GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection9.8
  4. CVE-2026-18613GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection9.8
  5. CVE-2026-18612GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection9.8
  6. CVE-2026-32293GL-iNet Comet (GL-RM1) KVM insufficient certificate validation3.7
  7. CVE-2026-32292GL-iNet Comet (GL-RM1) KVM insufficient login rate-limiting7.5
  8. CVE-2026-32291GL-iNet Comet (GL-RM1) KVM unauthenticated root access via UART serial console6.8
  9. CVE-2026-32290GL-iNet Comet (GL-RM1) KVM insufficient firmware verification4.7
  10. CVE-2026-26792GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_url, target_version, current_version, firmware_upload, has...9.8
  11. CVE-2026-26794GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add_group() function. This vulnerability allows attackers to execute arbitrary SQL database operations vi...8.8
  12. CVE-2026-26795GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function. This vulnerability allows attackers to execute arb...9.8
  13. CVE-2026-26791GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_server function. This vulnerability allows attackers to exec...9.8
  14. CVE-2026-26793GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function. This vulnerability allows attackers to execute arbitrary commands via a crafted ...9.8
  15. CVE-2025-67090The LuCI web interface on Gl Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. Fix available in version 4.8.2 GL.Inet AX1800 Version 4.6.4 & 4.6.8 lacks rate limiting or account lockout mec...5.1

The record

Peak rank
#80 in May 2023
Busiest month shown
May 2023, 9 CVEs
Months with a KEV entry
0 since Oct 2022
Monthly snapshots
7 since 2022
Gl-inet's full record, month by month