Beveiligingsadvies

CVE-2025-67089

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-01-08 00:00:00

Laatst bijgewerkt 2026-01-08 16:52:24

Toegewezen door mitre

CVSS-score 8.1

Status PUBLISHED

Beschrijving

A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present in the `plugins.install_package` RPC method, which fails to properly sanitize user input in package names. Authenticated attackers can exploit this to execute arbitrary commands with root privileges

← Alle CVE's bekijken Bekijk op cve.org ↗