https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:47:47.689289+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-18598 CVE-2026-18598 — GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection 2026-10-04T01:47:47.705134+00:00

Affected: GL.iNet GL-MT3000

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.get_system_log of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC plugin. The manipulation of the argument module results in command injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.