https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T00:48:14.197509+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-18585 CVE-2026-18585 — GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow 2026-10-08T00:48:14.213525+00:00

Affected: GL.iNet MT3000, GL.iNet MT6000, GL.iNet BE9300, GL.iNet BE3600, GL.iNet MT3600BE, GL.iNet E5800, GL.iNet BE6500, GL.iNet MT5000, GL.iNet X3000, GL.iNet XE3000 and 1 more

A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.get_file_list of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.