Search
Find a vulnerability
Search criteria
4 vulnerabilities found for E5800 by GL.iNet
CVE-2026-18585 (GCVE-0-2026-18585)
Vulnerability from nvd – Published: 2026-08-03 05:15 – Updated: 2026-08-03 13:21
VLAI
EPSS
VEX
Title
GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow
Summary
A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.get_file_list of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-03 13:20 UTC
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/385414 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/385414/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-18585 | third-party-advisory |
| https://vuldb.com/submit/849290 | third-party-advisory |
| https://github.com/gl-inet/CVE-issues/blob/main/4… | related |
Impacted products
11 products
| Vendor | Product | Version | |
|---|---|---|---|
| GL.iNet | MT3000 |
Affected:
20260707
cpe:2.3:a:gl.inet:mt3000:*:*:*:*:*:*:*:* |
|
| GL.iNet | MT6000 |
Affected:
20260707
cpe:2.3:a:gl.inet:mt6000:*:*:*:*:*:*:*:* |
|
| GL.iNet | BE9300 |
Affected:
20260707
cpe:2.3:a:gl.inet:be9300:*:*:*:*:*:*:*:* |
|
| GL.iNet | BE3600 |
Affected:
20260707
cpe:2.3:a:gl.inet:be3600:*:*:*:*:*:*:*:* |
|
| GL.iNet | MT3600BE |
Affected:
20260707
cpe:2.3:a:gl.inet:mt3600be:*:*:*:*:*:*:*:* |
|
| GL.iNet | E5800 |
Affected:
20260707
cpe:2.3:a:gl.inet:e5800:*:*:*:*:*:*:*:* |
|
| GL.iNet | BE6500 |
Affected:
20260707
cpe:2.3:a:gl.inet:be6500:*:*:*:*:*:*:*:* |
|
| GL.iNet | MT5000 |
Affected:
20260707
cpe:2.3:a:gl.inet:mt5000:*:*:*:*:*:*:*:* |
|
| GL.iNet | X3000 |
Affected:
20260707
cpe:2.3:a:gl.inet:x3000:*:*:*:*:*:*:*:* |
|
| GL.iNet | XE3000 |
Affected:
20260707
cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:* |
|
| GL.iNet | MT2500 |
Affected:
20260707
cpe:2.3:a:gl.inet:mt2500:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-18585",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-03T13:20:50.996638Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-03T13:21:10.843Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:gl.inet:mt3000:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "MT3000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:mt6000:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "MT6000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:be9300:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "BE9300",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:be3600:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "BE3600",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:mt3600be:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "MT3600BE",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:e5800:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "E5800",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:be6500:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "BE6500",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:mt5000:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "MT5000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:x3000:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "X3000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "XE3000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:mt2500:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "MT2500",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "GLiNet (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.get_file_list of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-03T05:15:07.982Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-385414 | GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/385414"
},
{
"name": "VDB-385414 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/385414/cti"
},
{
"name": "CVE-2026-18585 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-18585"
},
{
"name": "Submit #849290 | GL.iNet Router 4.8.x Cache overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/849290"
},
{
"tags": [
"related"
],
"url": "https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Heap%20buffer%20overflow%20in%20nas-web.get_file_list%20leading%20to%20authenticated%20denial%20of%20service.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-02T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-02T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-02T21:29:12.000Z",
"value": "VulDB entry last update"
}
],
"title": "GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-18585",
"datePublished": "2026-08-03T05:15:07.982Z",
"dateReserved": "2026-08-02T19:24:01.254Z",
"dateUpdated": "2026-08-03T13:21:10.843Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-18584 (GCVE-0-2026-18584)
Vulnerability from nvd – Published: 2026-08-03 04:45 – Updated: 2026-08-03 15:37
VLAI
EPSS
VEX
Title
GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization
Summary
A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /sdk/v1 of the component eSIM LPA API. Such manipulation leads to improper authorization. The attack can only be initiated within the local network. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-03 13:47 UTC
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/385413 | vdb-entry |
| https://vuldb.com/vuln/385413/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-18584 | third-party-advisory |
| https://vuldb.com/submit/849283 | third-party-advisory |
| https://github.com/gl-inet/CVE-issues/blob/main/4… | related |
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| GL.iNet | E5800 |
Affected:
20260707
cpe:2.3:a:gl.inet:e5800:*:*:*:*:*:*:*:* |
|
| GL.iNet | E750 |
Affected:
20260707
cpe:2.3:a:gl.inet:e750:*:*:*:*:*:*:*:* |
|
| GL.iNet | X2000 |
Affected:
20260707
cpe:2.3:a:gl.inet:x2000:*:*:*:*:*:*:*:* |
|
| GL.iNet | X3000 |
Affected:
20260707
cpe:2.3:a:gl.inet:x3000:*:*:*:*:*:*:*:* |
|
| GL.iNet | XE3000 |
Affected:
20260707
cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:* |
|
| GL.iNet | XE300 |
Affected:
20260707
cpe:2.3:a:gl.inet:xe300:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-18584",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-03T13:47:47.147815Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-03T15:37:18.296Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:gl.inet:e5800:*:*:*:*:*:*:*:*"
],
"modules": [
"eSIM LPA API"
],
"product": "E5800",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:e750:*:*:*:*:*:*:*:*"
],
"modules": [
"eSIM LPA API"
],
"product": "E750",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:x2000:*:*:*:*:*:*:*:*"
],
"modules": [
"eSIM LPA API"
],
"product": "X2000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:x3000:*:*:*:*:*:*:*:*"
],
"modules": [
"eSIM LPA API"
],
"product": "X3000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:*"
],
"modules": [
"eSIM LPA API"
],
"product": "XE3000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:xe300:*:*:*:*:*:*:*:*"
],
"modules": [
"eSIM LPA API"
],
"product": "XE300",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "GLiNet (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /sdk/v1 of the component eSIM LPA API. Such manipulation leads to improper authorization. The attack can only be initiated within the local network. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:X/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:X/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4.8,
"vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:P/E:ND/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-03T04:45:07.095Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-385413 | GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/385413"
},
{
"name": "VDB-385413 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/385413/cti"
},
{
"name": "CVE-2026-18584 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-18584"
},
{
"name": "Submit #849283 | GL.iNet Router v4.8.1 unauthorized",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/849283"
},
{
"tags": [
"related"
],
"url": "https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Unauthenticated%20access%20to%20eSIM%20LPA%20API%20via%20nginx%20proxy%20bypass.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-02T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-02T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-02T21:29:08.000Z",
"value": "VulDB entry last update"
}
],
"title": "GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-18584",
"datePublished": "2026-08-03T04:45:07.095Z",
"dateReserved": "2026-08-02T19:23:56.933Z",
"dateUpdated": "2026-08-03T15:37:18.296Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-18585 (GCVE-0-2026-18585)
Vulnerability from cvelistv5 – Published: 2026-08-03 05:15 – Updated: 2026-08-03 13:21
VLAI
EPSS
VEX
Title
GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow
Summary
A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.get_file_list of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-03 13:20 UTC
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/385414 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/385414/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-18585 | third-party-advisory |
| https://vuldb.com/submit/849290 | third-party-advisory |
| https://github.com/gl-inet/CVE-issues/blob/main/4… | related |
Impacted products
11 products
| Vendor | Product | Version | |
|---|---|---|---|
| GL.iNet | MT3000 |
Affected:
20260707
cpe:2.3:a:gl.inet:mt3000:*:*:*:*:*:*:*:* |
|
| GL.iNet | MT6000 |
Affected:
20260707
cpe:2.3:a:gl.inet:mt6000:*:*:*:*:*:*:*:* |
|
| GL.iNet | BE9300 |
Affected:
20260707
cpe:2.3:a:gl.inet:be9300:*:*:*:*:*:*:*:* |
|
| GL.iNet | BE3600 |
Affected:
20260707
cpe:2.3:a:gl.inet:be3600:*:*:*:*:*:*:*:* |
|
| GL.iNet | MT3600BE |
Affected:
20260707
cpe:2.3:a:gl.inet:mt3600be:*:*:*:*:*:*:*:* |
|
| GL.iNet | E5800 |
Affected:
20260707
cpe:2.3:a:gl.inet:e5800:*:*:*:*:*:*:*:* |
|
| GL.iNet | BE6500 |
Affected:
20260707
cpe:2.3:a:gl.inet:be6500:*:*:*:*:*:*:*:* |
|
| GL.iNet | MT5000 |
Affected:
20260707
cpe:2.3:a:gl.inet:mt5000:*:*:*:*:*:*:*:* |
|
| GL.iNet | X3000 |
Affected:
20260707
cpe:2.3:a:gl.inet:x3000:*:*:*:*:*:*:*:* |
|
| GL.iNet | XE3000 |
Affected:
20260707
cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:* |
|
| GL.iNet | MT2500 |
Affected:
20260707
cpe:2.3:a:gl.inet:mt2500:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-18585",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-03T13:20:50.996638Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-03T13:21:10.843Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:gl.inet:mt3000:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "MT3000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:mt6000:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "MT6000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:be9300:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "BE9300",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:be3600:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "BE3600",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:mt3600be:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "MT3600BE",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:e5800:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "E5800",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:be6500:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "BE6500",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:mt5000:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "MT5000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:x3000:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "X3000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "XE3000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:mt2500:*:*:*:*:*:*:*:*"
],
"modules": [
"APPS-NAS Module"
],
"product": "MT2500",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "GLiNet (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.get_file_list of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-03T05:15:07.982Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-385414 | GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/385414"
},
{
"name": "VDB-385414 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/385414/cti"
},
{
"name": "CVE-2026-18585 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-18585"
},
{
"name": "Submit #849290 | GL.iNet Router 4.8.x Cache overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/849290"
},
{
"tags": [
"related"
],
"url": "https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Heap%20buffer%20overflow%20in%20nas-web.get_file_list%20leading%20to%20authenticated%20denial%20of%20service.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-02T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-02T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-02T21:29:12.000Z",
"value": "VulDB entry last update"
}
],
"title": "GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-18585",
"datePublished": "2026-08-03T05:15:07.982Z",
"dateReserved": "2026-08-02T19:24:01.254Z",
"dateUpdated": "2026-08-03T13:21:10.843Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-18584 (GCVE-0-2026-18584)
Vulnerability from cvelistv5 – Published: 2026-08-03 04:45 – Updated: 2026-08-03 15:37
VLAI
EPSS
VEX
Title
GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization
Summary
A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /sdk/v1 of the component eSIM LPA API. Such manipulation leads to improper authorization. The attack can only be initiated within the local network. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-03 13:47 UTC
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/385413 | vdb-entry |
| https://vuldb.com/vuln/385413/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-18584 | third-party-advisory |
| https://vuldb.com/submit/849283 | third-party-advisory |
| https://github.com/gl-inet/CVE-issues/blob/main/4… | related |
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| GL.iNet | E5800 |
Affected:
20260707
cpe:2.3:a:gl.inet:e5800:*:*:*:*:*:*:*:* |
|
| GL.iNet | E750 |
Affected:
20260707
cpe:2.3:a:gl.inet:e750:*:*:*:*:*:*:*:* |
|
| GL.iNet | X2000 |
Affected:
20260707
cpe:2.3:a:gl.inet:x2000:*:*:*:*:*:*:*:* |
|
| GL.iNet | X3000 |
Affected:
20260707
cpe:2.3:a:gl.inet:x3000:*:*:*:*:*:*:*:* |
|
| GL.iNet | XE3000 |
Affected:
20260707
cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:* |
|
| GL.iNet | XE300 |
Affected:
20260707
cpe:2.3:a:gl.inet:xe300:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-18584",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-03T13:47:47.147815Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-03T15:37:18.296Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:gl.inet:e5800:*:*:*:*:*:*:*:*"
],
"modules": [
"eSIM LPA API"
],
"product": "E5800",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:e750:*:*:*:*:*:*:*:*"
],
"modules": [
"eSIM LPA API"
],
"product": "E750",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:x2000:*:*:*:*:*:*:*:*"
],
"modules": [
"eSIM LPA API"
],
"product": "X2000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:x3000:*:*:*:*:*:*:*:*"
],
"modules": [
"eSIM LPA API"
],
"product": "X3000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:*"
],
"modules": [
"eSIM LPA API"
],
"product": "XE3000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
},
{
"cpes": [
"cpe:2.3:a:gl.inet:xe300:*:*:*:*:*:*:*:*"
],
"modules": [
"eSIM LPA API"
],
"product": "XE300",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "20260707"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "GLiNet (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /sdk/v1 of the component eSIM LPA API. Such manipulation leads to improper authorization. The attack can only be initiated within the local network. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:X/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:X/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4.8,
"vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:P/E:ND/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-03T04:45:07.095Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-385413 | GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/385413"
},
{
"name": "VDB-385413 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/385413/cti"
},
{
"name": "CVE-2026-18584 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-18584"
},
{
"name": "Submit #849283 | GL.iNet Router v4.8.1 unauthorized",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/849283"
},
{
"tags": [
"related"
],
"url": "https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Unauthenticated%20access%20to%20eSIM%20LPA%20API%20via%20nginx%20proxy%20bypass.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-02T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-02T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-02T21:29:08.000Z",
"value": "VulDB entry last update"
}
],
"title": "GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-18584",
"datePublished": "2026-08-03T04:45:07.095Z",
"dateReserved": "2026-08-02T19:23:56.933Z",
"dateUpdated": "2026-08-03T15:37:18.296Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}