CVE-2026-5959Disclosure

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1. Affected by this issue is some unknown functionality of the component Factory Reset Handler. Performing a manipulation results in improper authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 1.8.2 can resolve this issue. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-09: 2Technical Details · 2026-04-09: 104-09
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-5959 Improper Authentication in GL.iNet GL-RM1 Factory Reset Handler 1.8.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5959

    Post summary

    This brief notice declares CVE-2026-5959 as an improper authentication flaw in GL.iNet GL-RM1 Factory Reset Handler 1.8.1, with no PoC, exploit, patch, or active exploitation details provided.

    0000051
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-5959 A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1. Affected by this issue is some unknown functionality of the component Fact… https://www.cve.org/CVERecord?id=CVE-2026-5959

    Post summary

    A vulnerability (CVE‑2026‑5959) was identified in certain GL.iNet router models, but the provided information is limited to the affected devices and a brief, undefined component reference, with no exploit details or mitigation guidance.

    00000129
    57.0K followersView on X

Explore more