GL-AXT1800 vulnerabilities

2 known vulnerabilities in GL-AXT1800 from GL.iNet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  GL-AXT1800: Improper Certificate Validation

  CVE-2025-44018Nov 24, 2025GL.iNet

  A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

• 9.8 Critical severity

  gl-mt2500: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2024-39227Aug 6, 2024GL.iNetEPSS 1.19%

  GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3000/X3000 v4.4 were discovered to contain insecure permission