CVE-2026-18585: GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow

Published Aug 3, 2026
·
Updated

A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.getfilelist of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.

Affected Software

12 affected components
GL.iNet MT3000<=20260707
GL.iNet MT6000<=20260707
GL.iNet BE9300<=20260707
GL.iNet BE3600<=20260707
GL.iNet MT3600BE<=20260707
GL.iNet E5800<=20260707
GL.iNet BE6500<=20260707
GL.iNet MT5000<=20260707
GL.iNet X3000<=20260707
GL.iNet XE3000<=20260707
GL.iNet MT2500<=20260707
APPS-NAS Module (nas-web.get_file_list)<=20260707

Event History

Aug 3, 2026
CVE Published
via MITRE·05:15 AM
Data Sourced
via MITRE·05:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 AM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-18585?

CVE-2026-18585 has a medium severity rating of 4.3.

2

How do I fix CVE-2026-18585?

To fix CVE-2026-18585, update your GL.iNet device software to the latest version released after 20260707.

3

What types of devices are affected by CVE-2026-18585?

CVE-2026-18585 affects various GL.iNet devices including MT3000, MT6000, BE9300, BE3600, and others.

4

What is the nature of the vulnerability in CVE-2026-18585?

CVE-2026-18585 is a heap-based buffer overflow vulnerability found in the nas-web.get_file_list function.

5

What is the potential impact of CVE-2026-18585?

The potential impact of CVE-2026-18585 includes unauthorized access and manipulation of the affected device.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203