GL.iNet GL-AXT1800 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting GL.iNet GL-AXT1800: 1 record(s), with affected versions and fixes.
CVE-2025-44018
High · 8.3
CWE-295 Nov 24, 2025
Improper Certificate Validation in GL.iNet GL-AXT1800
A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.