Skip to content
OpenAdvisories
High · 7.5 CVE-2026-32292 EUVD-2026-12602GHSA-769c-phxp-jfff

GL-iNet Comet (GL-RM1) KVM insufficient login rate-limiting

Published Mar 17, 2026 · Updated Mar 23, 2026 · Assigned by cisa-cg

Vendor: GL.iNet Product: Comet KVM Category: Virtualization

Description

The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.

Affected products

VendorProductAffectedFixed
GL-iNet Comet KVM < 1.7.2 1.7.2

Advisories 1

References