CVE-2026-26795 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function. This vulnerab…
Critical CVSS: 9.8

CVE-2026-26795

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function. This vulnerability allows attackers to execute arbitrary commands via a crafted input.
Vendor
Gl-inet
Product
Ar300m16 Firmware
CWE
CWE-77
Yayın Tarihi
2026-03-12 18:16:23
Güncelleme
2026-03-16 14:18:27
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-77 Ar300m16 Firmware CRITICAL Gl-inet 2026

Referanslar

https://github.com/sezangel/IOT-vul/tree/main/GL-iNet/GL-AR300M16/logread--get_system_log