CVE-2026-12186: Command Injection in GL.iNet GL-MT3000
A command injection vulnerability exists in the GL.iNet GL-MT3000 device up to version 4.4.5. The flaw is in the replace_country function within the Tor Proxy Service Configuration Handler, allowing remote attackers to execute arbitrary commands. The vulnerability has a high severity score of 8.7. The vendor has released version 4.7 to address this issue and recommends upgrading to this fixed version.
AI Analysis
Technical Summary
CVE-2026-12186 is a command injection vulnerability affecting GL.iNet GL-MT3000 devices running firmware versions up to 4.4.5. The issue resides in the replace_country function in the /usr/lib/oui-httpd/rpc/tor library, part of the Tor Proxy Service Configuration Handler. This flaw allows remote attackers to inject and execute arbitrary commands on the device. The vulnerability has been publicly disclosed with a high CVSS 4.0 score of 8.7. The vendor responded promptly and released a fixed firmware version 4.7 that mitigates the issue.
Potential Impact
Successful exploitation of this vulnerability allows remote attackers to execute arbitrary commands on affected GL.iNet GL-MT3000 devices, potentially leading to full system compromise. This could impact device integrity, confidentiality, and availability. The vulnerability is remotely exploitable without user interaction and requires low attack complexity.
Mitigation Recommendations
Upgrade affected GL.iNet GL-MT3000 devices from versions 4.4.0 through 4.4.5 to version 4.7 or later, which contains the official fix for this command injection vulnerability. Applying this update fully mitigates the issue. No other mitigations are indicated by the vendor.
CVE-2026-12186: Command Injection in GL.iNet GL-MT3000
Description
A command injection vulnerability exists in the GL.iNet GL-MT3000 device up to version 4.4.5. The flaw is in the replace_country function within the Tor Proxy Service Configuration Handler, allowing remote attackers to execute arbitrary commands. The vulnerability has a high severity score of 8.7. The vendor has released version 4.7 to address this issue and recommends upgrading to this fixed version.
CVSS v4.0
Score 8.7high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-12186 is a command injection vulnerability affecting GL.iNet GL-MT3000 devices running firmware versions up to 4.4.5. The issue resides in the replace_country function in the /usr/lib/oui-httpd/rpc/tor library, part of the Tor Proxy Service Configuration Handler. This flaw allows remote attackers to inject and execute arbitrary commands on the device. The vulnerability has been publicly disclosed with a high CVSS 4.0 score of 8.7. The vendor responded promptly and released a fixed firmware version 4.7 that mitigates the issue.
Potential Impact
Successful exploitation of this vulnerability allows remote attackers to execute arbitrary commands on affected GL.iNet GL-MT3000 devices, potentially leading to full system compromise. This could impact device integrity, confidentiality, and availability. The vulnerability is remotely exploitable without user interaction and requires low attack complexity.
Mitigation Recommendations
Upgrade affected GL.iNet GL-MT3000 devices from versions 4.4.0 through 4.4.5 to version 4.7 or later, which contains the official fix for this command injection vulnerability. Applying this update fully mitigates the issue. No other mitigations are indicated by the vendor.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-06-14T06:30:08.377Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a2f141d1cccde5f2630aacc
Added to database: 06/14/2026, 20:50:37 UTC
Last enriched: 06/22/2026, 15:16:08 UTC
Last updated: 07/31/2026, 19:22:57 UTC
Views: 163
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.