Skip to content
OpenAdvisories

Product · GL.iNet

Comet KVM

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-32291

    GL-iNet Comet (GL-RM1) KVM unauthenticated root access via UART serial console

    The GL-iNet Comet (GL-RM1) KVM before 1.8.2 does not require authentication on the UART serial console. This attack requires physically opening the device and connecting to the UART pins.

    GL.iNet Comet KVM Virtualization
  • Medium 4.7
    CVE-2026-32290

    GL-iNet Comet (GL-RM1) KVM insufficient firmware verification

    The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corresponding MD5 hash to pass verificatio…

    GL.iNet Comet KVM Virtualization