Gl-Inet Gl-MT3000 vulnerabilities

5 CVEs affecting Gl-Inet Gl-MT3000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-18616, published 2026-08-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-18612, published 2026-08-03. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function plugins.remove_package/plugins.install_package of the file /cgi-bin/glc of the component plugins.so…
CVE-2026-18616, published 2026-08-03. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.set_peer of the file /cgi-bin/glc of the component wg-server.so Native Plugin. The…
CVE-2026-18615, published 2026-08-03. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the function wg-server.generate_publickey of the file /cgi-bin/glc of the component wg-server.so Native…
CVE-2026-18614, published 2026-08-03. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the function s2s.enable_echo_server of the file /cgi-bin/glc of the component s2s.so Native Plugin. Performing a manipulation…
CVE-2026-18613, published 2026-08-03. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.set_config of the file /cgi-bin/glc of the component plugins.so Native Plugin. Such…