← Back to browse · API

CVE-2026-26793

Severity
CRITICAL
CVSS
9.8
EPSS
0.02266
Risk score
39.99
CISA KEV
No
PoC
No
Published
2026-03-12
Modified
2026-03-12
First seen
2026-08-07
Aliases
EUVD-2026-11659, GHSA-HHCC-5FW6-867J
Products
n/a:n/a n/a
Sources
euvd EUVD-2026-11659

Description

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function. This vulnerability allows attackers to execute arbitrary commands via a crafted input.

References