CVE-2026-18602: GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection
A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function ovpn-client.getrecommendconfig of the file /cgi-bin/glc of the component ovpn-client.so Native Plugin. Executing a manipulation of the argument Hostname can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18602?
The severity of CVE-2026-18602 is critical with a score of 9.8.
How do I fix CVE-2026-18602?
To fix CVE-2026-18602, update the GL.iNet GL-MT3000 firmware to version 4.4.6 or later.
What impact does CVE-2026-18602 have on my device?
CVE-2026-18602 allows for command injection through the ovpn-client.get_recommend_config function, potentially compromising device security.
Which versions of GL.iNet GL-MT3000 are affected by CVE-2026-18602?
GL.iNet GL-MT3000 versions up to and including 4.4.5 are affected by CVE-2026-18602.
What component is involved in CVE-2026-18602?
CVE-2026-18602 involves the ovpn-client.so Native Plugin and specifically the ovpn-client.get_recommend_config function.