Security Advisory

CVE-2026-18599

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-03 12:00:09

Last updated 2026-08-03 15:37:07

Assigner VulDB

CVSS score not scored

State PUBLISHED

Description

A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.set_config of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plugin. This manipulation of the argument record_size causes command injection. The exploit has been published and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.

← Browse all CVEs View on cve.org ↗