Gl-Inet: >> Gl-Axt1800 Firmware >> 4.2.0 Security Vulnerabilities
A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present in the `plugins.install_package` RPC method, which fails to properly sanitize user input in package names. Authenticated attackers can exploit this to execute arbitrary commands with root privileges
CVSS Score
8.1
EPSS Score
0.003
Published
2026-01-08