Description
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function. This vulnerability allows attackers to execute arbitrary commands via a crafted input.
Critical · 9.8
CVE-2026-26795
EUVD-2026-11627GHSA-6vxg-w2p5-89mg
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log fu…
Published Mar 12, 2026 · Updated Mar 14, 2026 · Assigned by mitre