CVE-2026-11505EPSS p8.8%
CVE-2026-11505CVE-2026-11505
Description
A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This affects an unknown function of the component glnassys. Executing a manipulation can lead to use of hard-coded cryptographic key
. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is reported as difficult. Upgrading to version 4.9.0 mitigates this issue. Upgrading the affected component is advised.
Scoring
| CVSS | 5.0 () |
| Vector | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L |
| EPSS | 0.19% probability of exploitation · percentile 8.8% · 2026-06-18T12:00:27Z |
| Last modified | 2026-06-08 |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.