Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-67089 1 Gl-inet 2 Gl-axt1800, Gl-axt1800 Firmware 2026-01-16 8.1 High
A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present in the `plugins.install_package` RPC method, which fails to properly sanitize user input in package names. Authenticated attackers can exploit this to execute arbitrary commands with root privileges