By year
19
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2026-18787 A vulnerability was identified in GL.iNet AX1800 up to 4.8.3.High 7.4 · Aug 4, 2026
- CVE-2026-18686 A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5.High 8.9 · Aug 3, 2026
- CVE-2026-18685 A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5.High 8.9 · Aug 3, 2026
- CVE-2026-18684 A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5.High 8.9 · Aug 3, 2026
- CVE-2026-18616 A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5.High 8.9 · Aug 3, 2026
- CVE-2026-18615 A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5.High 8.9 · Aug 3, 2026
- CVE-2026-18614 A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5.High 8.9 · Aug 3, 2026
- CVE-2026-18613 A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5.High 8.9 · Aug 3, 2026
- CVE-2026-18612 A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5.High 8.9 · Aug 3, 2026
- CVE-2026-18602 A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5.High 8.9 · Aug 3, 2026
- CVE-2026-18601 A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5.High 8.9 · Aug 3, 2026
- CVE-2026-18600 A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5.High 7.4 · Aug 3, 2026
- CVE-2026-18599 A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5.High 7.3 · Aug 3, 2026
- CVE-2026-18598 A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5.High 7.4 · Aug 3, 2026
- CVE-2026-12187 A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5.High 7.4 · Jun 14, 2026
- CVE-2026-12186 A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5.High 7.4 · Jun 14, 2026
- CVE-2026-5959 A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1.High 7.5 · Apr 9, 2026
- CVE-2026-32292 The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.Critical 9.3 · Mar 17, 2026
- CVE-2026-32291 The GL-iNet Comet (GL-RM1) KVM before 1.8.2 does not require authentication on the UART serial console.High 7 · Mar 17, 2026
- CVE-2026-32290 The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware files.High 7 · Mar 17, 2026
- CVE-2026-26793 GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function.Critical 9.8 · Mar 12, 2026
- CVE-2026-26795 GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function.Critical 9.8 · Mar 12, 2026
- CVE-2026-26794 GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add_group() function.High 8.8 · Mar 12, 2026
- CVE-2026-26792 GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_url, target_version, Critical 9.8 · Mar 12, 2026
- CVE-2026-26791 GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_server function.Critical 9.8 · Mar 12, 2026
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.