GL.iNet Vulnerabilities and Affected Products
Vulnerabilities associated with BE3600.
Products
Clear product- GL-MT300016 vulnerabilities
- MT30005 vulnerabilities
- MT60005 vulnerabilities
- AX18004 vulnerabilities
- MT25004 vulnerabilities
- A13003 vulnerabilities
- AR300M3 vulnerabilities
- AXT18003 vulnerabilities
- GL-A1300 Slate Plus3 vulnerabilities
- GL-AR300M Shadow3 vulnerabilities
- GL-AR300M16 Shadow3 vulnerabilities
- GL-AR750 Creta3 vulnerabilities
- GL-AR750S-EXT Slate3 vulnerabilities
- GL-AX1800 Flint3 vulnerabilities
- GL-AXT1800 Slate AX3 vulnerabilities
- GL-B1300 Convexa-B3 vulnerabilities
- GL-B3000 Marble3 vulnerabilities
- GL-BE3600 Slate 73 vulnerabilities
- GL-E7503 vulnerabilities
- GL-E750V2 Mudi3 vulnerabilities
- GL-MT1300 Beryl3 vulnerabilities
- GL-MT2500 Brume 23 vulnerabilities
- GL-MT3000 Beryl AX3 vulnerabilities
- GL-MT300N-V2 Mango3 vulnerabilities
- GL-MT6000 Flint 23 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-18585MEDIUM | GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflowA vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.get_file_list of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability. | CVSS5.3v4.0 | EPSS0.299% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |