{"vulnerability": "CVE-2026-18685", "sightings": [{"uuid": "cee15acd-45a2-4f52-b333-864843c8abb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18685", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7p5zk45z2f", "content": "CVE-2026-18685 - gl-mt3000\nThe GL.iNet GL-MT3000 modem has a vulnerability that allows attackers to execute unauthorized commands when upgrading the modem's software. This can be done remotely, which means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#glmt3000 #glinet #CVE #infosec", "creation_timestamp": "2026-08-03T23:56:05.271621Z"}, {"uuid": "bcc30692-a3eb-4e03-a514-c51959175014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18685", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms7pg6a5dr2g", "content": "GL.iNet GL-MT3000 (v4.4.0 \u2013 4.4.5) hit by CRITICAL command injection (CVE-2026-18685). Remote code execution possible \u2014 no patch yet. Restrict access & monitor devices. https://radar.offseq.com/threat/cve-2026-18685-command-injection-in-glinet-gl-mt3000-32060ee21fb81c76 #OffSeq #IoTSecurity #Vuln...", "creation_timestamp": "2026-08-04T00:00:39.884919Z"}, {"uuid": "7a72757c-a25d-4a39-9d4b-4d509546fef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18685", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117034296046822265", "content": "CVE-2026-18685: CRITICAL command injection in GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote, unauthenticated RCE possible. No patch yet \u2014 restrict access & monitor for abuse. Details: https://radar.offseq.com/threat/cve-2026-18685-command-injection-in-glinet-gl-mt3000-32060ee21fb81c76 #OffSeq #vuln #IoT #infosec", "creation_timestamp": "2026-08-04T00:00:37.565864Z"}, {"uuid": "9b7b7bbc-9c84-44d7-a8b1-dfcef21101c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d6lw44fkpwikn", "content": "CVE-2026-18685 - GL.iNet GL-MT3000 modem.so glc set_upgrade command injection\nCVE ID : CVE-2026-18685\n \n Published : Aug. 4, 2026, 12:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the ...", "creation_timestamp": "2026-08-04T01:55:20.759165Z"}]}