🔐 CVE Alert

CVE-2026-19981

HIGH 7.4

GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection

CVSS Score
7.4
EPSS Score
0.0%
EPSS Percentile
0th

A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. This affects an unknown part of the component Wi-Fi Timer Power-Schedule Feature. Executing a manipulation of the argument switch_power/restore_power can lead to os command injection. The attack can be launched remotely. The vendor explains: "After our investigation, we have confirmed that the vulnerability described (...) does indeed exist."

CWE CWE-78 CWE-77
Vendor gl.inet
Product a1300
Published Aug 17, 2026
Stay Ahead of the Next One

Get instant alerts for gl.inet a1300

Be the first to know when new high vulnerabilities affecting gl.inet a1300 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:X/RL:X/RC:R
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

GL.iNet / A1300
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / AX1800
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / AXT1800
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / BE1400
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / BE3600
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / BE6500
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / BE9300
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / BE10000
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / E5800
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / MT2500
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / MT3000
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / MT3600BE
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / MT5000
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / MT6000
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / X2000
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / X3000
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8
GL.iNet / XE3000
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8

References

NVD ↗ CVE.org ↗ EPSS Data ↗
vuldb.com: https://vuldb.com/vuln/391163 vuldb.com: https://vuldb.com/vuln/391163/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19981 vuldb.com: https://vuldb.com/submit/873917 github.com: https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Wi-Fi%20Timer%20Power-Schedule%20Cron%20RCE.md

Credits

🔍 GLiNet (VulDB User) VulDB CNA Team