Gl-Inet Comet Gl-RM1 Firmware vulnerabilities

4 CVEs affecting Gl-Inet Comet Gl-RM1 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-32293, published 2026-03-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-32292, published 2026-03-17. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.
CVE-2026-32291, published 2026-03-17. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. The GL-iNet Comet (GL-RM1) KVM before 1.8.2 does not require authentication on the UART serial console. This attack requires physically opening the device and connecting to the UART pins.
CVE-2026-32293, published 2026-03-17. Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days. The GL-iNet Comet (GL-RM1) KVM connects to a GL-iNet site during boot-up to provision client and CA certificates. The GL-RM1 does not verify certificates used for this connection, allowing an…
CVE-2026-32290, published 2026-03-17. Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days. The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware files. An attacker-in-the-middle or a compromised update server could modify the…