Unrated severityNVD Advisory· Published Mar 12, 2026· Updated Mar 14, 2026
CVE-2026-26792
CVE-2026-26792
Description
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_url, target_version, current_version, firmware_upload, hash_type, hash_value, and upgrade_type parameters. These vulnerabilities allow attackers to execute arbitrary commands via a crafted input.
Affected products
2- GL-iNet/GL-AR300M16description
- Range: = 4.3.11
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.