Approved changes feed: RSS · Atom

cpe:2.3:o:gl-inet:gl-axt1800_firmware:4.6.4:*:*:*:*:*:*:*

part: o version: 4.6.4 update: *

VendorGl Inet (0ba6498a-0971-5dec-92da-bb83b4dab2f2)
ProductGl Axt1800 Firmware (2d7d71ee-8bcc-5ff0-b945-aec7a666882e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-67089 vulnerable 2026-06-08 07:41:19.685076 Details available
A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present in the `plugins.install_package` RPC method, which fails to properly sanitize user input in package names. Authenticated attackers can exploit this to execute arbitrary commands with root privileges
Published: 2026-01-08T00:00:00.000Z
Updated: 2026-01-08T16:52:24.897Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.