Record status Published
Identifier year (not publication year) 2026
Source publication Aug 17, 2026
Source updated Aug 18, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) GL.iNet XE3000 WebDAV Service MOVE authorization
A vulnerability was identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this vulnerability is the function COPY/MOVE of the component WebDAV Service. Such manipulation leads to authorization bypass. It is possible to launch the attack remotely. The vendor explains: "After our investigation, we have confirmed that the vulnerability described (...) does indeed exist."
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
A1300
Vendor GL.iNet
Product A1300
Platforms Unknown
Default status Unknown
A1300 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
AX1800
Vendor GL.iNet
Product AX1800
Platforms Unknown
Default status Unknown
AX1800 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
AXT1800
Vendor GL.iNet
Product AXT1800
Platforms Unknown
Default status Unknown
AXT1800 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
BE1400
Vendor GL.iNet
Product BE1400
Platforms Unknown
Default status Unknown
BE1400 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
BE3600
Vendor GL.iNet
Product BE3600
Platforms Unknown
Default status Unknown
BE3600 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
BE6500
Vendor GL.iNet
Product BE6500
Platforms Unknown
Default status Unknown
BE6500 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
BE9300
Vendor GL.iNet
Product BE9300
Platforms Unknown
Default status Unknown
BE9300 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
BE10000
Vendor GL.iNet
Product BE10000
Platforms Unknown
Default status Unknown
BE10000 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
E5800
Vendor GL.iNet
Product E5800
Platforms Unknown
Default status Unknown
E5800 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
MT2500
Vendor GL.iNet
Product MT2500
Platforms Unknown
Default status Unknown
MT2500 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
MT3000
Vendor GL.iNet
Product MT3000
Platforms Unknown
Default status Unknown
MT3000 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
MT3600BE
Vendor GL.iNet
Product MT3600BE
Platforms Unknown
Default status Unknown
MT3600BE · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
MT5000
Vendor GL.iNet
Product MT5000
Platforms Unknown
Default status Unknown
MT5000 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
MT6000
Vendor GL.iNet
Product MT6000
Platforms Unknown
Default status Unknown
MT6000 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
X2000
Vendor GL.iNet
Product X2000
Platforms Unknown
Default status Unknown
X2000 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
X3000
Vendor GL.iNet
Product X3000
Platforms Unknown
Default status Unknown
X3000 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed
XE3000
Vendor GL.iNet
Product XE3000
Platforms Unknown
Default status Unknown
XE3000 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 4.0 affectedUnavailable Unavailable Unavailable None listed 4.1 affectedUnavailable Unavailable Unavailable None listed 4.2 affectedUnavailable Unavailable Unavailable None listed 4.3 affectedUnavailable Unavailable Unavailable None listed 4.4 affectedUnavailable Unavailable Unavailable None listed 4.5 affectedUnavailable Unavailable Unavailable None listed 4.6 affectedUnavailable Unavailable Unavailable None listed 4.7 affectedUnavailable Unavailable Unavailable None listed 4.8 affectedUnavailable Unavailable Unavailable None listed