# GL.iNet GL-MT3000.

Every CVE that names GL.iNet GL-MT3000 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection](https://agentprime.io/advisories/CVE-2026-18686.md)
  `CVE-2026-18686` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 modem.so glc set_upgrade command injection](https://agentprime.io/advisories/CVE-2026-18685.md)
  `CVE-2026-18685` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 modem.so glc remove_profile command injection](https://agentprime.io/advisories/CVE-2026-18684.md)
  `CVE-2026-18684` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection](https://agentprime.io/advisories/CVE-2026-18616.md)
  `CVE-2026-18616` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection](https://agentprime.io/advisories/CVE-2026-18615.md)
  `CVE-2026-18615` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection](https://agentprime.io/advisories/CVE-2026-18614.md)
  `CVE-2026-18614` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection](https://agentprime.io/advisories/CVE-2026-18613.md)
  `CVE-2026-18613` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, CWE-707
- [GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection](https://agentprime.io/advisories/CVE-2026-18612.md)
  `CVE-2026-18612` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection](https://agentprime.io/advisories/CVE-2026-18602.md)
  `CVE-2026-18602` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection](https://agentprime.io/advisories/CVE-2026-18601.md)
  `CVE-2026-18601` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection](https://agentprime.io/advisories/CVE-2026-18600.md)
  `CVE-2026-18600` · CVE record: GL.iNet GL-MT3000 · CVSS 8.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection](https://agentprime.io/advisories/CVE-2026-18599.md)
  `CVE-2026-18599` · CVE record: GL.iNet GL-MT3000 · CVSS 8.6 High · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection](https://agentprime.io/advisories/CVE-2026-18598.md)
  `CVE-2026-18598` · CVE record: GL.iNet GL-MT3000 · CVSS 8.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection](https://agentprime.io/advisories/CVE-2026-12187.md)
  `CVE-2026-12187` · CVE record: GL.iNet GL-MT3000 · CVSS 8.7 High · Not analysed yet · Published 14 Jun 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection](https://agentprime.io/advisories/CVE-2026-12186.md)
  `CVE-2026-12186` · CVE record: GL.iNet GL-MT3000 · CVSS 8.7 High · Not analysed yet · Published 14 Jun 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection](https://agentprime.io/advisories/CVE-2026-11452.md)
  `CVE-2026-11452` · CVE record: GL.iNet GL-MT3000 · CVSS 6.9 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection](https://agentprime.io/advisories/CVE-2026-11451.md)
  `CVE-2026-11451` · CVE record: GL.iNet GL-MT3000 · CVSS 6.9 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 Path Normalization dlopen command injection](https://agentprime.io/advisories/CVE-2026-11450.md)
  `CVE-2026-11450` · CVE record: GL.iNet GL-MT3000 · CVSS 6.9 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection](https://agentprime.io/advisories/CVE-2026-11449.md)
  `CVE-2026-11449` · CVE record: GL.iNet GL-MT3000 · CVSS 5.3 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection](https://agentprime.io/advisories/CVE-2026-11448.md)
  `CVE-2026-11448` · CVE record: GL.iNet GL-MT3000 · CVSS 5.1 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection](https://agentprime.io/advisories/CVE-2026-11447.md)
  `CVE-2026-11447` · CVE record: GL.iNet GL-MT3000 · CVSS 5.3 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Other injection, Command injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=gl-inet-gl-mt3000>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/gl-inet-gl-mt3000/>. Everything for agents: <https://agentprime.io/llms.txt>.