GL.iNet AR300M16 FIRMWARE 4.3.11
Approved changes feed: RSS · Atom
cpe:2.3:o:gl-inet:ar300m16_firmware:4.3.11:*:*:*:*:*:*:*
part: o version: 4.3.11 update: *
| Vendor | Gl Inet (0ba6498a-0971-5dec-92da-bb83b4dab2f2) |
|---|---|
| Product | Ar300M16 Firmware (70ebf7ec-e1ae-5d03-b391-f72fb7df949f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-26795 |
vulnerable | 2026-06-08 07:53:21.707489 |
Details available
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.get_system_log function. This vulnerability allows attackers to execute arbitrary commands via a crafted input.
Published: 2026-03-12T00:00:00.000Z
Updated: 2026-03-14T03:30:31.005Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26794 |
vulnerable | 2026-06-08 07:53:21.707076 |
Details available
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the add_group() function. This vulnerability allows attackers to execute arbitrary SQL database operations via a crafted HTTP request.
Published: 2026-03-12T00:00:00.000Z
Updated: 2026-03-14T03:28:33.618Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26793 |
vulnerable | 2026-06-08 07:53:21.706586 |
Details available
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the set_config function. This vulnerability allows attackers to execute arbitrary commands via a crafted input.
Published: 2026-03-12T00:00:00.000Z
Updated: 2026-03-12T19:14:06.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26792 |
vulnerable | 2026-06-08 07:53:21.706148 |
Details available
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the set_upgrade function via the modem_url, target_version, current_version, firmware_upload, hash_type, hash_value, and upgrade_type parameters. These vulnerabilities allow attackers to execute arbitrary commands via a crafted input.
Published: 2026-03-12T00:00:00.000Z
Updated: 2026-03-14T03:26:25.162Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26791 |
vulnerable | 2026-06-08 07:53:21.704347 |
Details available
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable_echo_server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input.
Published: 2026-03-12T00:00:00.000Z
Updated: 2026-03-14T03:23:33.407Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39229 |
vulnerable | 2026-06-08 06:41:48.899955 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39228 |
vulnerable | 2026-06-08 06:41:48.885318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39227 |
vulnerable | 2026-06-08 06:41:48.882960 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39226 |
vulnerable | 2026-06-08 06:41:48.860432 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39225 |
vulnerable | 2026-06-08 06:41:48.825878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.