CVE-2026-12186Patch

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replace_country in the library /usr/lib/oui-httpd/rpc/tor of the component Tor Proxy Service Configuration Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 4.7 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-77

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Full discourse1 post

ADK Cyber@ADKCyber137d
Patch
CVSS 9.0 CVE-2026-12186 impacts GL.iNet GL-MT3000 (Tor proxy config). Verify firmware version and apply updates if affected. via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability https://t.co/N7yXmwryFn
Post summary
The tweet announces a high‑severity vulnerability (CVE‑2026‑12186) for GL.iNet GL‑MT3000 and recommends verifying firmware and applying updates, but does not provide PoC, exploit code, or evidence of active exploitation.
0000062
93 followersView on X

Explore more

Back to dashboard