Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-19981

GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. This affects an unknown part of the component Wi-Fi Timer Power-Schedule Feature. Executing a manipulation of the argument switch_power/restore_power can lead to os command injection. The attack can be launched remotely. The vendor explains: "After our investigation, we have confirmed that the vulnerability described (...) does indeed exist."

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GL.iNet A1300

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet AX1800

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet AXT1800

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet BE1400

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet BE3600

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet BE6500

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet BE9300

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet BE10000

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet E5800

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet MT2500

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet MT3000

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet MT3600BE

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet MT5000

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet MT6000

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet X2000

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet X3000

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

GL.iNet XE3000

  • 4.0affected
  • 4.1affected
  • 4.2affected
  • 4.3affected
  • 4.4affected
  • 4.5affected
  • 4.6affected
  • 4.7affected
  • 4.8affected

References