CVE-2026-19981

Summary

A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. This affects an unknown part of the component Wi-Fi Timer Power-Schedule Feature. Executing a manipulation of the argument switch_power/restore_power can lead to os command injection. The attack can be launched remotely. The vendor explains: "After our investigation, we have confirmed that the vulnerability described (…) does indeed exist."

Affected Software

VendorProductVersion RangeStatus
GL.iNetA13004.0affected
GL.iNetA13004.1affected
GL.iNetA13004.2affected
GL.iNetA13004.3affected
GL.iNetA13004.4affected
GL.iNetA13004.5affected
GL.iNetA13004.6affected
GL.iNetA13004.7affected
GL.iNetA13004.8affected
GL.iNetAX18004.0affected
GL.iNetAX18004.1affected
GL.iNetAX18004.2affected
GL.iNetAX18004.3affected
GL.iNetAX18004.4affected
GL.iNetAX18004.5affected
GL.iNetAX18004.6affected
GL.iNetAX18004.7affected
GL.iNetAX18004.8affected
GL.iNetAXT18004.0affected
GL.iNetAXT18004.1affected
GL.iNetAXT18004.2affected
GL.iNetAXT18004.3affected
GL.iNetAXT18004.4affected
GL.iNetAXT18004.5affected
GL.iNetAXT18004.6affected
GL.iNetAXT18004.7affected
GL.iNetAXT18004.8affected
GL.iNetBE14004.0affected
GL.iNetBE14004.1affected
GL.iNetBE14004.2affected
GL.iNetBE14004.3affected
GL.iNetBE14004.4affected
GL.iNetBE14004.5affected
GL.iNetBE14004.6affected
GL.iNetBE14004.7affected
GL.iNetBE14004.8affected
GL.iNetBE36004.0affected
GL.iNetBE36004.1affected
GL.iNetBE36004.2affected
GL.iNetBE36004.3affected
GL.iNetBE36004.4affected
GL.iNetBE36004.5affected
GL.iNetBE36004.6affected
GL.iNetBE36004.7affected
GL.iNetBE36004.8affected
GL.iNetBE65004.0affected
GL.iNetBE65004.1affected
GL.iNetBE65004.2affected
GL.iNetBE65004.3affected
GL.iNetBE65004.4affected
GL.iNetBE65004.5affected
GL.iNetBE65004.6affected
GL.iNetBE65004.7affected
GL.iNetBE65004.8affected
GL.iNetBE93004.0affected
GL.iNetBE93004.1affected
GL.iNetBE93004.2affected
GL.iNetBE93004.3affected
GL.iNetBE93004.4affected
GL.iNetBE93004.5affected
GL.iNetBE93004.6affected
GL.iNetBE93004.7affected
GL.iNetBE93004.8affected
GL.iNetBE100004.0affected
GL.iNetBE100004.1affected
GL.iNetBE100004.2affected
GL.iNetBE100004.3affected
GL.iNetBE100004.4affected
GL.iNetBE100004.5affected
GL.iNetBE100004.6affected
GL.iNetBE100004.7affected
GL.iNetBE100004.8affected
GL.iNetE58004.0affected
GL.iNetE58004.1affected
GL.iNetE58004.2affected
GL.iNetE58004.3affected
GL.iNetE58004.4affected
GL.iNetE58004.5affected
GL.iNetE58004.6affected
GL.iNetE58004.7affected
GL.iNetE58004.8affected
GL.iNetMT25004.0affected
GL.iNetMT25004.1affected
GL.iNetMT25004.2affected
GL.iNetMT25004.3affected
GL.iNetMT25004.4affected
GL.iNetMT25004.5affected
GL.iNetMT25004.6affected
GL.iNetMT25004.7affected
GL.iNetMT25004.8affected
GL.iNetMT30004.0affected
GL.iNetMT30004.1affected
GL.iNetMT30004.2affected
GL.iNetMT30004.3affected
GL.iNetMT30004.4affected
GL.iNetMT30004.5affected
GL.iNetMT30004.6affected
GL.iNetMT30004.7affected
GL.iNetMT30004.8affected
GL.iNetMT3600BE4.0affected
GL.iNetMT3600BE4.1affected
GL.iNetMT3600BE4.2affected
GL.iNetMT3600BE4.3affected
GL.iNetMT3600BE4.4affected
GL.iNetMT3600BE4.5affected
GL.iNetMT3600BE4.6affected
GL.iNetMT3600BE4.7affected
GL.iNetMT3600BE4.8affected
GL.iNetMT50004.0affected
GL.iNetMT50004.1affected
GL.iNetMT50004.2affected
GL.iNetMT50004.3affected
GL.iNetMT50004.4affected
GL.iNetMT50004.5affected
GL.iNetMT50004.6affected
GL.iNetMT50004.7affected
GL.iNetMT50004.8affected
GL.iNetMT60004.0affected
GL.iNetMT60004.1affected
GL.iNetMT60004.2affected
GL.iNetMT60004.3affected
GL.iNetMT60004.4affected
GL.iNetMT60004.5affected
GL.iNetMT60004.6affected
GL.iNetMT60004.7affected
GL.iNetMT60004.8affected
GL.iNetX20004.0affected
GL.iNetX20004.1affected
GL.iNetX20004.2affected
GL.iNetX20004.3affected
GL.iNetX20004.4affected
GL.iNetX20004.5affected
GL.iNetX20004.6affected
GL.iNetX20004.7affected
GL.iNetX20004.8affected
GL.iNetX30004.0affected
GL.iNetX30004.1affected
GL.iNetX30004.2affected
GL.iNetX30004.3affected
GL.iNetX30004.4affected
GL.iNetX30004.5affected
GL.iNetX30004.6affected
GL.iNetX30004.7affected
GL.iNetX30004.8affected
GL.iNetXE30004.0affected
GL.iNetXE30004.1affected
GL.iNetXE30004.2affected
GL.iNetXE30004.3affected
GL.iNetXE30004.4affected
GL.iNetXE30004.5affected
GL.iNetXE30004.6affected
GL.iNetXE30004.7affected
GL.iNetXE30004.8affected

Weaknesses

  • CWE-78: OS Command Injection
  • CWE-77: Command Injection

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References