Approved changes feed: RSS · Atom

cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGl.Inet (0061642a-9bd9-5c7b-930b-33601f58c68a)
ProductXe3000 (dfa12c67-7311-51c4-801c-6c5665b2a278)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18584 vulnerable 2026-09-16 04:34:01.849256 GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization
MEDIUM (5.4)
A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /sdk/v1 of the component eSIM LPA API. Such manipulation leads to improper authorization. The attack can only be initiated within the local network. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.
Published: 2026-08-03T04:45:07.095Z
Updated: 2026-08-03T15:37:18.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-18585 vulnerable 2026-09-16 04:34:01.749258 GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow
MEDIUM (4.3)
A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.get_file_list of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.
Published: 2026-08-03T05:15:07.982Z
Updated: 2026-08-03T13:21:10.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11505 vulnerable 2026-07-29 00:23:31.318597 GL.iNet XE3000 glnassys hard-coded key
MEDIUM (5)
A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This affects an unknown function of the component glnassys. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is reported as difficult. Upgrading to version 4.9.0 mitigates this issue. Upgrading the affected component is advised.
Published: 2026-06-08T10:15:09.229Z
Updated: 2026-06-08T13:25:49.443Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.