CVE-2026-5959

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5959", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-04-09T09:50:43.991Z", "datePublished": "2026-04-09T14:30:14.351Z", "dateUpdated": "2026-04-13T20:01:57.939Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-09T14:30:14.351Z"}, "title": "GL.iNet GL-RM1/GL-RM10/GL-RM10RC/GL-RM1PE Factory Reset improper authentication", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-287", "lang": "en", "description": "Improper Authentication"}]}], "affected": [{"vendor": "GL.iNet", "product": "GL-RM1", "versions": [{"version": "1.8.1", "status": "affected"}, {"version": "1.8.2", "status": "unaffected"}], "modules": ["Factory Reset Handler"]}, {"vendor": "GL.iNet", "product": "GL-RM10", "versions": [{"version": "1.8.1", "status": "affected"}, {"version": "1.8.2", "status": "unaffected"}], "modules": ["Factory Reset Handler"]}, {"vendor": "GL.iNet", "product": "GL-RM10RC", "versions": [{"version": "1.8.1", "status": "affected"}, {"version": "1.8.2", "status": "unaffected"}], "modules": ["Factory Reset Handler"]}, {"vendor": "GL.iNet", "product": "GL-RM1PE", "versions": [{"version": "1.8.1", "status": "affected"}, {"version": "1.8.2", "status": "unaffected"}], "modules": ["Factory Reset Handler"]}], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1. Affected by this issue is some unknown functionality of the component Factory Reset Handler. Performing a manipulation results in improper authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 1.8.2 can resolve this issue. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 7.5, "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X", "baseSeverity": "HIGH"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.6, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:X/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.6, "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:X/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.8, "vectorString": "AV:N/AC:H/Au:M/C:C/I:C/A:C/E:ND/RL:OF/RC:C"}}], "timeline": [{"time": "2026-04-09T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-04-09T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-04-09T11:55:52.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "GLiNet (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/356512", "name": "VDB-356512 | GL.iNet GL-RM1/GL-RM10/GL-RM10RC/GL-RM1PE Factory Reset improper authentication", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/356512/cti", "name": "VDB-356512 | CTI Indicators (IOB, IOC)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/786688", "name": "Submit #786688 | GL.iNet KVM 1.8.1 Access Authentication Bypass", "tags": ["third-party-advisory"]}, {"url": "https://github.com/gl-inet/CVE-issues/blob/main/KVM/1.8.1/Remote%20Access%20Authentication%20Bypass%20After%20Factory%20Reset.md", "tags": ["related"]}, {"url": "https://dl.gl-inet.com/kvm/", "tags": ["patch"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-13T20:01:45.933133Z", "id": "CVE-2026-5959", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-13T20:01:57.939Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-5959", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-13T20:01:45.933133Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-13T20:01:52.999Z"}}], "cna": {"title": "GL.iNet GL-RM1/GL-RM10/GL-RM10RC/GL-RM1PE Factory Reset improper authentication", "credits": [{"lang": "en", "type": "reporter", "value": "GLiNet (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:X/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:X/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.8, "vectorString": "AV:N/AC:H/Au:M/C:C/I:C/A:C/E:ND/RL:OF/RC:C"}}], "affected": [{"vendor": "GL.iNet", "modules": ["Factory Reset Handler"], "product": "GL-RM1", "versions": [{"status": "affected", "version": "1.8.1"}, {"status": "unaffected", "version": "1.8.2"}]}, {"vendor": "GL.iNet", "modules": ["Factory Reset Handler"], "product": "GL-RM10", "versions": [{"status": "affected", "version": "1.8.1"}, {"status": "unaffected", "version": "1.8.2"}]}, {"vendor": "GL.iNet", "modules": ["Factory Reset Handler"], "product": "GL-RM10RC", "versions": [{"status": "affected", "version": "1.8.1"}, {"status": "unaffected", "version": "1.8.2"}]}, {"vendor": "GL.iNet", "modules": ["Factory Reset Handler"], "product": "GL-RM1PE", "versions": [{"status": "affected", "version": "1.8.1"}, {"status": "unaffected", "version": "1.8.2"}]}], "timeline": [{"lang": "en", "time": "2026-04-09T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-04-09T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-04-09T11:55:52.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/356512", "name": "VDB-356512 | GL.iNet GL-RM1/GL-RM10/GL-RM10RC/GL-RM1PE Factory Reset improper authentication", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/356512/cti", "name": "VDB-356512 | CTI Indicators (IOB, IOC)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/786688", "name": "Submit #786688 | GL.iNet KVM 1.8.1 Access Authentication Bypass", "tags": ["third-party-advisory"]}, {"url": "https://github.com/gl-inet/CVE-issues/blob/main/KVM/1.8.1/Remote%20Access%20Authentication%20Bypass%20After%20Factory%20Reset.md", "tags": ["related"]}, {"url": "https://dl.gl-inet.com/kvm/", "tags": ["patch"]}], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1. Affected by this issue is some unknown functionality of the component Factory Reset Handler. Performing a manipulation results in improper authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 1.8.2 can resolve this issue. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-287", "description": "Improper Authentication"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-09T14:30:14.351Z"}}}, "cveMetadata": {"cveId": "CVE-2026-5959", "state": "PUBLISHED", "dateUpdated": "2026-04-13T20:01:57.939Z", "dateReserved": "2026-04-09T09:50:43.991Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-04-09T14:30:14.351Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["Factory Reset Handler"], "product": "GL-RM1", "vendor": "GL.iNet", "versions": [{"status": "affected", "version": "1.8.1"}, {"status": "unaffected", "version": "1.8.2"}]}, {"modules": ["Factory Reset Handler"], "product": "GL-RM10", "vendor": "GL.iNet", "versions": [{"status": "affected", "version": "1.8.1"}, {"status": "unaffected", "version": "1.8.2"}]}, {"modules": ["Factory Reset Handler"], "product": "GL-RM10RC", "vendor": "GL.iNet", "versions": [{"status": "affected", "version": "1.8.1"}, {"status": "unaffected", "version": "1.8.2"}]}, {"modules": ["Factory Reset Handler"], "product": "GL-RM1PE", "vendor": "GL.iNet", "versions": [{"status": "affected", "version": "1.8.1"}, {"status": "unaffected", "version": "1.8.2"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1. Affected by this issue is some unknown functionality of the component Factory Reset Handler. Performing a manipulation results in improper authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 1.8.2 can resolve this issue. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product."}, {"lang": "es", "value": "Una falla de seguridad ha sido descubierta en GL.iNet GL-RM1, GL-RM10, GL-RM10RC y GL-RM1PE 1.8.1. Afectada por este problema es alguna funcionalidad desconocida del componente Gestor de Restablecimiento de F\u00e1brica. Realizar una manipulaci\u00f3n resulta en autenticaci\u00f3n impropia. El ataque puede ser iniciado remotamente. La complejidad de un ataque es bastante alta. La explotaci\u00f3n se sabe que es dif\u00edcil. Actualizar a la versi\u00f3n 1.8.2 puede resolver este problema. Es aconsejable actualizar el componente afectado. El proveedor fue contactado tempranamente, respondi\u00f3 de una manera muy profesional y r\u00e1pidamente lanz\u00f3 una versi\u00f3n corregida del producto afectado."}], "id": "CVE-2026-5959", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "MULTIPLE", "availabilityImpact": "COMPLETE", "baseScore": 6.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:H/Au:M/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.2, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.7, "impactScore": 5.9, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-5959", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-13T20:01:45.933133Z", "version": "2.0.3"}}]}, "published": "2026-04-09T15:16:17.760", "references": [{"source": "cna@vuldb.com", "url": "https://dl.gl-inet.com/kvm/"}, {"source": "cna@vuldb.com", "url": "https://github.com/gl-inet/CVE-issues/blob/main/KVM/1.8.1/Remote%20Access%20Authentication%20Bypass%20After%20Factory%20Reset.md"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/786688"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/356512"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/356512/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.8.1"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "1.8.2"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "gl-rm1", "vendor": "gl.inet"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.8.1"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "1.8.2"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "gl-rm10", "vendor": "gl.inet"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.8.1"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "1.8.2"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "gl-rm10rc", "vendor": "gl.inet"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.8.1"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "1.8.2"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "gl-rm1pe", "vendor": "gl.inet"}], "analysis": {"en": {"generated_at": "2026-04-09T16:27:30.530842+00:00", "value": {"mitigation_remediation": ["Apply firmware update to version 1.8.2 from GL.iNet"], "summary": {"action": "Immediate Patch", "impact": "Remote Authentication Bypass"}, "threat_synthesis": {"affected_systems": "The flaw affects GL.iNet models GL\u2011RM1, GL\u2011RM10, GL\u2011RM10RC, and GL\u2011RM1PE running firmware version 1.8.1. An upgrade to firmware 1.8.2 resolves the issue. No further version details are listed, so owners of any devices running the mentioned model series with firmware 1.8.1 should be treated as vulnerable.", "description_and_impact": "The vulnerability is an improper authentication flaw in the Factory Reset Handler of the affected GL.iNet devices. When the device is reset, manipulated input allows an attacker to bypass the authentication requirement, enabling unauthorized control of the device. This weakness is classified as CWE\u2011287, indicating a failure to properly verify the user's identity. The flaw can be triggered remotely, potentially giving a malicious actor admin\u2011level access to change settings, access network traffic, or install malware. The exploitation is described as difficult and high in complexity, but the consequence is significant if an attacker succeeds.", "risk_and_exploitability": "The CVSS score of 7.5 places the vulnerability in the high severity range. EPSS information is not available, and the flaw is not listed in the CISA KEV catalog. Attackers would need remote access to the device and must perform complex manipulation of the reset process to bypass authentication, making exploitation nontrivial. Nonetheless, given the remote initiation and significant impact on device control, the overall risk remains high for exposed or poorly isolated networks."}}}}, "created": "2026-04-10T08:53:33.971504+00:00", "updated": "2026-04-10T09:32:45.994295+00:00", "vendors": ["gl.inet", "gl.inet$PRODUCT$gl-rm1", "gl.inet$PRODUCT$gl-rm10", "gl.inet$PRODUCT$gl-rm10rc", "gl.inet$PRODUCT$gl-rm1pe"]}