{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18787", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-08-04T08:33:00.136Z", "datePublished": "2026-08-04T17:00:09.281Z", "dateUpdated": "2026-08-04T17:19:14.440Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-04T17:00:09.281Z"}, "title": "GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-77", "lang": "en", "description": "Command Injection"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-74", "lang": "en", "description": "Injection"}]}], "affected": [{"vendor": "GL.iNet", "product": "AX1800", "versions": [{"version": "4.8.0", "status": "affected"}, {"version": "4.8.1", "status": "affected"}, {"version": "4.8.2", "status": "affected"}, {"version": "4.8.3", "status": "affected"}], "cpes": ["cpe:2.3:o:gl-inet:ax1800_firmware:*:*:*:*:*:*:*:*"], "modules": ["RPC Endpoint"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in GL.iNet AX1800 up to 4.8.3. The affected element is the function remove_rule of the file /usr/share/gl-ngx/oui-rpc.lua of the component RPC Endpoint. The manipulation of the argument args.id leads to command injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P", "baseSeverity": "HIGH"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 8.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 9, "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-08-04T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-08-04T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-08-04T10:38:05.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "misaki_ce (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/385788", "name": "VDB-385788 | GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/385788/cti", "name": "VDB-385788 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-18787", "name": "CVE-2026-18787 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/857346", "name": "Submit #857346 | GL.iNet AX1800 4.8.3 Command Injection", "tags": ["third-party-advisory"]}, {"url": "https://github.com/xxianxiayubanmian/iot/blob/main/GL-link%20AX1800.md", "tags": ["exploit"]}], "x_generator": ["VulDB PVTS v202608"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-04T17:18:57.423604Z", "id": "CVE-2026-18787", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-04T17:19:14.440Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-18787", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-04T17:18:57.423604Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-04T17:19:09.403Z"}}], "cna": {"title": "GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection", "credits": [{"lang": "en", "type": "reporter", "value": "misaki_ce (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.7, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 9, "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:o:gl-inet:ax1800_firmware:*:*:*:*:*:*:*:*"], "vendor": "GL.iNet", "modules": ["RPC Endpoint"], "product": "AX1800", "versions": [{"status": "affected", "version": "4.8.0"}, {"status": "affected", "version": "4.8.1"}, {"status": "affected", "version": "4.8.2"}, {"status": "affected", "version": "4.8.3"}]}], "timeline": [{"lang": "en", "time": "2026-08-04T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-08-04T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-08-04T10:38:05.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/385788", "name": "VDB-385788 | GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/385788/cti", "name": "VDB-385788 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-18787", "name": "CVE-2026-18787 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/857346", "name": "Submit #857346 | GL.iNet AX1800 4.8.3 Command Injection", "tags": ["third-party-advisory"]}, {"url": "https://github.com/xxianxiayubanmian/iot/blob/main/GL-link%20AX1800.md", "tags": ["exploit"]}], "x_generator": ["VulDB PVTS v202608"], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in GL.iNet AX1800 up to 4.8.3. The affected element is the function remove_rule of the file /usr/share/gl-ngx/oui-rpc.lua of the component RPC Endpoint. The manipulation of the argument args.id leads to command injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "Command Injection"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-74", "description": "Injection"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-04T17:00:09.281Z"}}}, "cveMetadata": {"cveId": "CVE-2026-18787", "state": "PUBLISHED", "dateUpdated": "2026-08-04T17:19:14.440Z", "dateReserved": "2026-08-04T08:33:00.136Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-08-04T17:00:09.281Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.8.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.8.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.8.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.8.3"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "AX1800", "source": "cna", "vendor": "GL.iNet"}, "product": "ax1800", "vendor": "gl-inet"}], "created": "2026-08-04T18:30:12.276345+00:00", "updated": "2026-08-04T19:30:05.433079+00:00", "vendors": ["gl-inet", "gl-inet$PRODUCT$ax1800"]}