PT-2026-31635 · Gl.Inet · Gl-Rm1+3

Glinet · Published 2026-04-09 · Updated 2026-04-09 · CVE-2026-5959

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:H/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE versions 1.8.1

Description A security flaw exists in the Factory Reset Handler component, leading to improper authentication. The attack can be initiated remotely, but exploitation is difficult. The vendor responded promptly and released a fixed version.

Recommendations Upgrade to version 1.8.2.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-5959

Affected Products

Gl-Rm1

Gl-Rm10

Gl-Rm10Rc

Gl-Rm1Pe

References · 8

• 🔥 https://github.com/gl-inet/CVE-issues/blob/main/KVM/1.8.1/Remote%20Access%20Authentication%20Bypass%20After%20Factory%20Reset.md · Exploit
• https://dl.gl-inet.com/kvm · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-5959 · Security Note
• https://twitter.com/VulmonFeeds/status/2042326256696402327 · Twitter Post
• https://vuldb.com/vuln/356512 · Note
• https://vuldb.com/submit/786688 · Note
• https://vuldb.com/vuln/356512/cti · Note
• https://twitter.com/CVEnew/status/2042302830686716289 · Twitter Post