{"schema_version":1,"title":"GL.iNet GL-MT3000 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in GL.iNet GL-MT3000: 0 in the last 7 days and 3 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-18616, was published on 3 August 2026.","url":"https://junglewise.ai/threats/technologies/gl-mt3000","json_url":"https://junglewise.ai/threats/technologies/gl-mt3000.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/gl-mt3000","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":5,"all_time":10,"critical":3,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":3,"last_365_days":10},"latest":[{"cve":"CVE-2026-18616","cvss":9.8,"epss":0.0362,"slug":"cve-2026-18616-gl-inet-gl-mt3000-command-injection-in-wg-server","title":"GL-iNet GL-MT3000 command injection in wg-server","severity":"critical","exploited":false,"published_at":"2026-08-03T19:16:45.557+00:00","url":"https://junglewise.ai/threats/cve-2026-18616-gl-inet-gl-mt3000-command-injection-in-wg-server"},{"cve":"CVE-2026-18615","cvss":9.8,"epss":0.0362,"slug":"cve-2026-18615-gl-inet-gl-mt3000-command-injection-in-wg-server","title":"GL-iNet GL-MT3000 command injection in wg-server","severity":"critical","exploited":false,"published_at":"2026-08-03T19:16:45.383+00:00","url":"https://junglewise.ai/threats/cve-2026-18615-gl-inet-gl-mt3000-command-injection-in-wg-server"},{"cve":"CVE-2026-18614","cvss":9.8,"epss":0.0362,"slug":"cve-2026-18614-gl-inet-gl-mt3000-command-injection-in-s2s-so","title":"GL-iNet GL-MT3000 command injection in s2s.so","severity":"critical","exploited":false,"published_at":"2026-08-03T19:16:45.2+00:00","url":"https://junglewise.ai/threats/cve-2026-18614-gl-inet-gl-mt3000-command-injection-in-s2s-so"},{"cve":"CVE-2026-12187","cvss":8.8,"slug":"cve-2026-12187-gl-inet-gl-mt3000-command-injection-in-online-firmware-upgrade","title":"GL.iNet GL-MT3000 command injection in Online Firmware Upgrade Handler","severity":"high","exploited":false,"published_at":"2026-06-14T23:16:34.853+00:00","url":"https://junglewise.ai/threats/cve-2026-12187-gl-inet-gl-mt3000-command-injection-in-online-firmware-upgrade"},{"cve":"CVE-2026-12186","cvss":8.8,"slug":"cve-2026-12186-gl-inet-gl-mt3000-command-injection-in-tor-proxy-service","title":"GL.iNet GL-MT3000 command injection in Tor Proxy Service Configuration Handler","severity":"high","exploited":false,"published_at":"2026-06-14T21:16:18.483+00:00","url":"https://junglewise.ai/threats/cve-2026-12186-gl-inet-gl-mt3000-command-injection-in-tor-proxy-service"},{"cve":"CVE-2026-11452","cvss":7.3,"slug":"cve-2026-11452-gl-inet-gl-mt3000-command-injection-in-set-user-pwd-handler","title":"GL.iNet GL-MT3000 command injection in SET_USER_PWD handler","severity":"high","exploited":false,"published_at":"2026-06-07T04:16:29.96+00:00","url":"https://junglewise.ai/threats/cve-2026-11452-gl-inet-gl-mt3000-command-injection-in-set-user-pwd-handler"},{"cve":"CVE-2026-11451","cvss":7.3,"slug":"cve-2026-11451-gl-inet-gl-mt3000-command-injection-in-ftp-protocol-handler","title":"GL.iNet GL-MT3000 command injection in FTP Protocol Handler","severity":"high","exploited":false,"published_at":"2026-06-07T04:16:29.57+00:00","url":"https://junglewise.ai/threats/cve-2026-11451-gl-inet-gl-mt3000-command-injection-in-ftp-protocol-handler"},{"cve":"CVE-2026-11450","cvss":7.3,"slug":"cve-2026-11450-gl-inet-gl-mt3000-command-injection-in-nas-web-so-via-cgi-bin-glc","title":"GL.iNet GL-MT3000 command injection in nas-web.so via /cgi-bin/glc","severity":"high","exploited":false,"published_at":"2026-06-07T03:16:27.247+00:00","url":"https://junglewise.ai/threats/cve-2026-11450-gl-inet-gl-mt3000-command-injection-in-nas-web-so-via-cgi-bin-glc"},{"cve":"CVE-2026-11448","cvss":4.7,"slug":"cve-2026-11448-gl-inet-gl-mt3000-command-injection-in-minidlna-service","title":"GL.iNet GL-MT3000 command injection in MiniDLNA Service","severity":"medium","exploited":false,"published_at":"2026-06-07T03:16:26.233+00:00","url":"https://junglewise.ai/threats/cve-2026-11448-gl-inet-gl-mt3000-command-injection-in-minidlna-service"},{"cve":"CVE-2026-11447","cvss":6.3,"slug":"cve-2026-11447-gl-inet-gl-mt3000-command-injection-in-mtk-backend","title":"GL.iNet GL-MT3000 command injection in MTK Backend","severity":"medium","exploited":false,"published_at":"2026-06-07T02:16:23.313+00:00","url":"https://junglewise.ai/threats/cve-2026-11447-gl-inet-gl-mt3000-command-injection-in-mtk-backend"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":3,"exploited":0,"vulnerabilities":3},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"GL.iNet AX1800 (Flint)","slug":"ax1800","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/ax1800"},{"name":"GL.iNet MT3000 (Beryl AX)","slug":"mt3000","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/mt3000"},{"name":"GL.iNet MT6000 (Flint 2)","slug":"mt6000","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/mt6000"},{"name":"GL.iNet A1300 (Slate Plus)","slug":"a1300","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/a1300"},{"name":"GL.iNet AXT1800 (Slate AX)","slug":"axt1800","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/axt1800"},{"name":"GL.iNet MT2500 (Brume 2)","slug":"mt2500","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/mt2500"},{"name":"GL.iNet X3000 (Spitz AX)","slug":"x3000","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/x3000"},{"name":"GL.iNet XE3000 (Puli AX)","slug":"xe3000","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/xe3000"},{"name":"GL.iNet BE10000","slug":"be10000","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/be10000"},{"name":"GL.iNet BE1400","slug":"be1400","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/be1400"},{"name":"GL.iNet BE3600","slug":"be3600","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/be3600"},{"name":"GL.iNet E5800","slug":"e5800","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/e5800"}],"technology":{"hub":true,"name":"GL.iNet GL-MT3000","slug":"gl-mt3000","vendor":{"name":"GL.iNet","slug":"gl-inet","url":"https://junglewise.ai/threats/vendors/gl-inet"},"aliases":[],"category":"firmware","homepage":"https://www.gl-inet.com/products/gl-mt3000/","description":"Firmware for the GL-MT3000 (Beryl AX) Wi-Fi 6 travel router.","url":"https://junglewise.ai/threats/technologies/gl-mt3000"},"most_severe":[{"cve":"CVE-2026-18616","cvss":9.8,"epss":0.0362,"slug":"cve-2026-18616-gl-inet-gl-mt3000-command-injection-in-wg-server","title":"GL-iNet GL-MT3000 command injection in wg-server","severity":"critical","exploited":false,"published_at":"2026-08-03T19:16:45.557+00:00","url":"https://junglewise.ai/threats/cve-2026-18616-gl-inet-gl-mt3000-command-injection-in-wg-server"},{"cve":"CVE-2026-18615","cvss":9.8,"epss":0.0362,"slug":"cve-2026-18615-gl-inet-gl-mt3000-command-injection-in-wg-server","title":"GL-iNet GL-MT3000 command injection in wg-server","severity":"critical","exploited":false,"published_at":"2026-08-03T19:16:45.383+00:00","url":"https://junglewise.ai/threats/cve-2026-18615-gl-inet-gl-mt3000-command-injection-in-wg-server"},{"cve":"CVE-2026-18614","cvss":9.8,"epss":0.0362,"slug":"cve-2026-18614-gl-inet-gl-mt3000-command-injection-in-s2s-so","title":"GL-iNet GL-MT3000 command injection in s2s.so","severity":"critical","exploited":false,"published_at":"2026-08-03T19:16:45.2+00:00","url":"https://junglewise.ai/threats/cve-2026-18614-gl-inet-gl-mt3000-command-injection-in-s2s-so"},{"cve":"CVE-2026-12187","cvss":8.8,"slug":"cve-2026-12187-gl-inet-gl-mt3000-command-injection-in-online-firmware-upgrade","title":"GL.iNet GL-MT3000 command injection in Online Firmware Upgrade Handler","severity":"high","exploited":false,"published_at":"2026-06-14T23:16:34.853+00:00","url":"https://junglewise.ai/threats/cve-2026-12187-gl-inet-gl-mt3000-command-injection-in-online-firmware-upgrade"},{"cve":"CVE-2026-12186","cvss":8.8,"slug":"cve-2026-12186-gl-inet-gl-mt3000-command-injection-in-tor-proxy-service","title":"GL.iNet GL-MT3000 command injection in Tor Proxy Service Configuration Handler","severity":"high","exploited":false,"published_at":"2026-06-14T21:16:18.483+00:00","url":"https://junglewise.ai/threats/cve-2026-12186-gl-inet-gl-mt3000-command-injection-in-tor-proxy-service"},{"cve":"CVE-2026-11452","cvss":7.3,"slug":"cve-2026-11452-gl-inet-gl-mt3000-command-injection-in-set-user-pwd-handler","title":"GL.iNet GL-MT3000 command injection in SET_USER_PWD handler","severity":"high","exploited":false,"published_at":"2026-06-07T04:16:29.96+00:00","url":"https://junglewise.ai/threats/cve-2026-11452-gl-inet-gl-mt3000-command-injection-in-set-user-pwd-handler"},{"cve":"CVE-2026-11451","cvss":7.3,"slug":"cve-2026-11451-gl-inet-gl-mt3000-command-injection-in-ftp-protocol-handler","title":"GL.iNet GL-MT3000 command injection in FTP Protocol Handler","severity":"high","exploited":false,"published_at":"2026-06-07T04:16:29.57+00:00","url":"https://junglewise.ai/threats/cve-2026-11451-gl-inet-gl-mt3000-command-injection-in-ftp-protocol-handler"},{"cve":"CVE-2026-11450","cvss":7.3,"slug":"cve-2026-11450-gl-inet-gl-mt3000-command-injection-in-nas-web-so-via-cgi-bin-glc","title":"GL.iNet GL-MT3000 command injection in nas-web.so via /cgi-bin/glc","severity":"high","exploited":false,"published_at":"2026-06-07T03:16:27.247+00:00","url":"https://junglewise.ai/threats/cve-2026-11450-gl-inet-gl-mt3000-command-injection-in-nas-web-so-via-cgi-bin-glc"},{"cve":"CVE-2026-11447","cvss":6.3,"slug":"cve-2026-11447-gl-inet-gl-mt3000-command-injection-in-mtk-backend","title":"GL.iNet GL-MT3000 command injection in MTK Backend","severity":"medium","exploited":false,"published_at":"2026-06-07T02:16:23.313+00:00","url":"https://junglewise.ai/threats/cve-2026-11447-gl-inet-gl-mt3000-command-injection-in-mtk-backend"},{"cve":"CVE-2026-11448","cvss":4.7,"slug":"cve-2026-11448-gl-inet-gl-mt3000-command-injection-in-minidlna-service","title":"GL.iNet GL-MT3000 command injection in MiniDLNA Service","severity":"medium","exploited":false,"published_at":"2026-06-07T03:16:26.233+00:00","url":"https://junglewise.ai/threats/cve-2026-11448-gl-inet-gl-mt3000-command-injection-in-minidlna-service"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}