Threats tagged 'ghsa-9x8v-f5rv-67fr'

CVE-2026-18599 is a command injection vulnerability in the GL.iNet GL-MT3000 device up to version 4.4.5. The flaw exists in the logread.set_config function of the Logread Lua RPC Plugin, where manipulation of the record_size argument allows command injection. Exploit code has been published, but no confirmed active exploitation in the wild is reported. The vendor has confirmed the vulnerability's existence but has not provided a patch or official remediation guidance yet.