MT2500 vulnerabilities

6 known vulnerabilities in MT2500 from GL.iNet. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  A1300: Improper Neutralization of Special Elements used in a Command

  CVE-2026-19983Aug 17, 2026GL.iNetEPSS 2.06%

  A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/gl_nas_sys of the component NAS Command Service. The manipulation results in os comm

• 7.4 High severity

  A1300: Improper Neutralization of Special Elements used in a Command

  CVE-2026-19981Aug 17, 2026GL.iNetEPSS 1.77%

  A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. This affects an unknown part of the component Wi-Fi Timer Power-Sch

• 7.4 High severity

  A1300: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-19980Aug 17, 2026GL.iNet

  A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this issue is the function ui.update_langs of the

• 8.3 High severity

  A1300: Improper Authorization

  CVE-2026-19979Aug 17, 2026GL.iNet

  A vulnerability was identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this vulnerability is the function COPY/MOVE of the com

• 7.5 High severity

  mt1300: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-27356Feb 27, 2024GL.iNetEPSS 23.9%

  An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800

• 7.8 High severity

  AX1800: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-50445Dec 28, 2023GL.iNetEPSS 9.12%

  Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7, AR750S v4.3.7, AR750 v4.3.7, AR300M v4.3.7, and B1300 v4.3.7., allows local attackers to execute ar