Security vulnerabilities in GL.iNet routers and gateway devices — a popular line of OpenWRT-based SOHO, travel, and prosumer edge appliances including the MT3000, AX1800, MT6000, and Beryl/Slate/Opal series. GL.iNet devices frequently appear at network edges in small offices, remote work setups, and infrastructure deployments. Combined article + CVE feed for the GL.iNet beat.https://0daynews.com/en-ushttps://0daynews.com/articles/2026-08-17-gl-inet-490-rce-flaws-routers/https://0daynews.com/articles/2026-08-17-gl-inet-490-rce-flaws-routers/GL.iNet confirmed five high-severity RCE and auth bypass vulnerabilities across its 4.8.x firmware line. Version 4.9.0 is the fix for all affected devices.Mon, 17 Aug 2026 06:00:00 GMTGL.iNetarticlehttps://0daynews.com/cve/cve-2026-19979/https://0daynews.com/cve/cve-2026-19979/Authorization bypass in GL.iNet's WebDAV service COPY and MOVE operations lets remote attackers access files outside the designated public share scope on a wide range of 4.8.x devices.Mon, 17 Aug 2026 00:00:00 GMTGL.iNethighcvehttps://0daynews.com/cve/cve-2026-19980/https://0daynews.com/cve/cve-2026-19980/Code injection in GL.iNet's ui.update_langs function via hour/min/week arguments in the language update scheduler; affects seventeen 4.8.x models, remotely exploitable, PoC public.Mon, 17 Aug 2026 00:00:00 GMTGL.iNethighcvehttps://0daynews.com/cve/cve-2026-19981/https://0daynews.com/cve/cve-2026-19981/OS command injection via switch_power/restore_power arguments in GL.iNet's Wi-Fi Timer Power-Schedule feature affects seventeen 4.8.x device models; remotely exploitable, PoC public.Mon, 17 Aug 2026 00:00:00 GMTGL.iNethighcvehttps://0daynews.com/cve/cve-2026-19982/https://0daynews.com/cve/cve-2026-19982/OS command injection via dest_port/dest_ip arguments in GL.iNet's firewall-management RPC on BE9300 and MT6000 devices running firmware 4.8.x; remotely exploitable, PoC public.Mon, 17 Aug 2026 00:00:00 GMTGL.iNethighcvehttps://0daynews.com/cve/cve-2026-19983/https://0daynews.com/cve/cve-2026-19983/Unauthenticated host-header manipulation in GL.iNet's NAS command service enables remote code execution as root on A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000, XE3000 running 4.8.x.Mon, 17 Aug 2026 00:00:00 GMTGL.iNethighcve