https://vulnerability.circl.lu/sightings/feed 2026-08-05T08:54:36.291072+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a149fe02-d587-4402-82fe-910d213e6044/export 2026-08-05T08:54:36.311342+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a149fe02-d587-4402-82fe-910d213e6044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117036919208348305", "content": "CVE-2026-18686 - Critical command injection in GL.iNet GL-MT3000 via nas-web.add_user. Public exploit, CVSS 9.8, unpatched. Restrict access and monitor now. #CVE #GLiNet #infosec\nhttps://www.valtersit.com/cve/cve-2026-18686/", "creation_timestamp": "2026-08-04T11:07:45.606757Z"} 2026-08-04T11:07:45.606757+00:00 https://vulnerability.circl.lu/sighting/7d131304-8b1e-4c4c-b293-ba187889060f/export 2026-08-05T08:54:36.313511+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7d131304-8b1e-4c4c-b293-ba187889060f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msauoyb6mx2r", "content": "CVE-2026-18686 - Critical command injection in GL.iNet GL-MT3000 via nas-web.add_user. Public exploit, CVSS 9.8, unpatched. Restrict access and monitor now. #CVE #GLiNet #infosec\n\nhttps://www.valtersit.com/cve/cve-2026-18686/", "creation_timestamp": "2026-08-04T11:07:42.750755Z"} 2026-08-04T11:07:42.750755+00:00 https://vulnerability.circl.lu/sighting/9a13a0d9-cea3-4983-89a8-2e661d0d9684/export 2026-08-05T08:54:36.313711+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9a13a0d9-cea3-4983-89a8-2e661d0d9684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18686", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cknwu5hcvw2cw", "content": "CVE-2026-18686 - GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection\nCVE ID : CVE-2026-18686\n \n Published : Aug. 4, 2026, 12:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected e...", "creation_timestamp": "2026-08-04T02:01:18.571730Z"} 2026-08-04T02:01:18.571730+00:00 https://vulnerability.circl.lu/sighting/bc902cd8-0afc-49a2-8da3-de51e0e11b50/export 2026-08-05T08:54:36.313868+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bc902cd8-0afc-49a2-8da3-de51e0e11b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms7ugrbllc2x", "content": "CRITICAL command injection (CVE-2026-18686) hits GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote attackers can run commands \u2014 no patch yet. Restrict admin access & monitor closely. https://radar.offseq.com/threat/cve-2026-18686-command-injection-in-glinet-gl-mt3000-14534eb705079787 #OffSeq #CVE", "creation_timestamp": "2026-08-04T01:30:29.063716Z"} 2026-08-04T01:30:29.063716+00:00 https://vulnerability.circl.lu/sighting/2a409c84-8f90-4be2-bb33-84a84d61a092/export 2026-08-05T08:54:36.314026+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2a409c84-8f90-4be2-bb33-84a84d61a092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117034649197021910", "content": "CVE-2026-18686: CRITICAL command injection in GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote, unauthenticated code execution possible \u2014 no patch yet. Limit admin interface exposure & monitor for abuse. https://radar.offseq.com/threat/cve-2026-18686-command-injection-in-glinet-gl-mt3000-14534eb705079787 #OffSeq #CVE #RouterSecurity", "creation_timestamp": "2026-08-04T01:30:25.850830Z"} 2026-08-04T01:30:25.850830+00:00