VULNERABILITY INTELLIGENCE
CVE-2026-11505
CVSS score5 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-06-08
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This affects an unknown function of the component glnassys. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is reported as difficult. Upgrading to version 4.9.0 mitigates this issue. Upgrading the affected component is advised.
Weakness classification
- cna@vuldb.com: CWE-320