CVE-2026-18584 (GCVE-0-2026-18584)
Vulnerability from cvelistv5
Published
2026-08-03 04:45
Modified
2026-08-03 15:37
CWE
  • CWE-285 - Improper Authorization
  • CWE-266 - Incorrect Privilege Assignment
Summary
A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /sdk/v1 of the component eSIM LPA API. Such manipulation leads to improper authorization. The attack can only be initiated within the local network. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.
Impacted products
Vendor Product Version
GL.iNet E5800 Version: 20260707
    cpe:2.3:a:gl.inet:e5800:*:*:*:*:*:*:*:*
Create a notification for this product.
   GL.iNet E750 Version: 20260707
    cpe:2.3:a:gl.inet:e750:*:*:*:*:*:*:*:*
Create a notification for this product.
   GL.iNet X2000 Version: 20260707
    cpe:2.3:a:gl.inet:x2000:*:*:*:*:*:*:*:*
Create a notification for this product.
   GL.iNet X3000 Version: 20260707
    cpe:2.3:a:gl.inet:x3000:*:*:*:*:*:*:*:*
Create a notification for this product.
   GL.iNet XE3000 Version: 20260707
    cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:*
Create a notification for this product.
   GL.iNet XE300 Version: 20260707
    cpe:2.3:a:gl.inet:xe300:*:*:*:*:*:*:*:*
Create a notification for this product.
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-18584",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-03T13:47:47.147815Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-03T15:37:18.296Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:gl.inet:e5800:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "eSIM LPA API"
          ],
          "product": "E5800",
          "vendor": "GL.iNet",
          "versions": [
            {
              "status": "affected",
              "version": "20260707"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:gl.inet:e750:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "eSIM LPA API"
          ],
          "product": "E750",
          "vendor": "GL.iNet",
          "versions": [
            {
              "status": "affected",
              "version": "20260707"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:gl.inet:x2000:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "eSIM LPA API"
          ],
          "product": "X2000",
          "vendor": "GL.iNet",
          "versions": [
            {
              "status": "affected",
              "version": "20260707"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:gl.inet:x3000:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "eSIM LPA API"
          ],
          "product": "X3000",
          "vendor": "GL.iNet",
          "versions": [
            {
              "status": "affected",
              "version": "20260707"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "eSIM LPA API"
          ],
          "product": "XE3000",
          "vendor": "GL.iNet",
          "versions": [
            {
              "status": "affected",
              "version": "20260707"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:gl.inet:xe300:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "eSIM LPA API"
          ],
          "product": "XE300",
          "vendor": "GL.iNet",
          "versions": [
            {
              "status": "affected",
              "version": "20260707"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "GLiNet (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /sdk/v1 of the component eSIM LPA API. Such manipulation leads to improper authorization. The attack can only be initiated within the local network. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:X/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:X/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4.8,
            "vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:P/E:ND/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "Improper Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T04:45:07.095Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-385413 | GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/385413"
        },
        {
          "name": "VDB-385413 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/385413/cti"
        },
        {
          "name": "CVE-2026-18584 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-18584"
        },
        {
          "name": "Submit #849283 | GL.iNet Router v4.8.1 unauthorized",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/849283"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Unauthenticated%20access%20to%20eSIM%20LPA%20API%20via%20nginx%20proxy%20bypass.md"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-02T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-02T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-02T21:29:08.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-18584",
    "datePublished": "2026-08-03T04:45:07.095Z",
    "dateReserved": "2026-08-02T19:23:56.933Z",
    "dateUpdated": "2026-08-03T15:37:18.296Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-18584\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-03T13:47:47.147815Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-03T13:47:50.819Z\"}}], \"cna\": {\"title\": \"GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization\", \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"GLiNet (VulDB User)\"}, {\"lang\": \"en\", \"type\": \"coordinator\", \"value\": \"VulDB CNA Team\"}], \"metrics\": [{\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X\"}}, {\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 5.4, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:X/RL:X/RC:R\"}}, {\"cvssV3_0\": {\"version\": \"3.0\", \"baseScore\": 5.4, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:X/RL:X/RC:R\"}}, {\"cvssV2_0\": {\"version\": \"2.0\", \"baseScore\": 4.8, \"vectorString\": \"AV:A/AC:L/Au:N/C:N/I:P/A:P/E:ND/RL:ND/RC:C\"}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:gl.inet:e5800:*:*:*:*:*:*:*:*\"], \"vendor\": \"GL.iNet\", \"modules\": [\"eSIM LPA API\"], \"product\": \"E5800\", \"versions\": [{\"status\": \"affected\", \"version\": \"20260707\"}]}, {\"cpes\": [\"cpe:2.3:a:gl.inet:e750:*:*:*:*:*:*:*:*\"], \"vendor\": \"GL.iNet\", \"modules\": [\"eSIM LPA API\"], \"product\": \"E750\", \"versions\": [{\"status\": \"affected\", \"version\": \"20260707\"}]}, {\"cpes\": [\"cpe:2.3:a:gl.inet:x2000:*:*:*:*:*:*:*:*\"], \"vendor\": \"GL.iNet\", \"modules\": [\"eSIM LPA API\"], \"product\": \"X2000\", \"versions\": [{\"status\": \"affected\", \"version\": \"20260707\"}]}, {\"cpes\": [\"cpe:2.3:a:gl.inet:x3000:*:*:*:*:*:*:*:*\"], \"vendor\": \"GL.iNet\", \"modules\": [\"eSIM LPA API\"], \"product\": \"X3000\", \"versions\": [{\"status\": \"affected\", \"version\": \"20260707\"}]}, {\"cpes\": [\"cpe:2.3:a:gl.inet:xe3000:*:*:*:*:*:*:*:*\"], \"vendor\": \"GL.iNet\", \"modules\": [\"eSIM LPA API\"], \"product\": \"XE3000\", \"versions\": [{\"status\": \"affected\", \"version\": \"20260707\"}]}, {\"cpes\": [\"cpe:2.3:a:gl.inet:xe300:*:*:*:*:*:*:*:*\"], \"vendor\": \"GL.iNet\", \"modules\": [\"eSIM LPA API\"], \"product\": \"XE300\", \"versions\": [{\"status\": \"affected\", \"version\": \"20260707\"}]}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-08-02T00:00:00.000Z\", \"value\": \"Advisory disclosed\"}, {\"lang\": \"en\", \"time\": \"2026-08-02T02:00:00.000Z\", \"value\": \"VulDB entry created\"}, {\"lang\": \"en\", \"time\": \"2026-08-02T21:29:08.000Z\", \"value\": \"VulDB entry last update\"}], \"references\": [{\"url\": \"https://vuldb.com/vuln/385413\", \"name\": \"VDB-385413 | GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"https://vuldb.com/vuln/385413/cti\", \"name\": \"VDB-385413 | CTI Indicators (IOB, IOC, TTP, IOA)\", \"tags\": [\"signature\", \"permissions-required\"]}, {\"url\": \"https://vuldb.com/cve/CVE-2026-18584\", \"name\": \"CVE-2026-18584 | CVE Analysis and Report\", \"tags\": [\"third-party-advisory\"]}, {\"url\": \"https://vuldb.com/submit/849283\", \"name\": \"Submit #849283 | GL.iNet Router v4.8.1 unauthorized\", \"tags\": [\"third-party-advisory\"]}, {\"url\": \"https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Unauthenticated%20access%20to%20eSIM%20LPA%20API%20via%20nginx%20proxy%20bypass.md\", \"tags\": [\"related\"]}], \"x_generator\": [\"VulDB PVTS v202608\"], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /sdk/v1 of the component eSIM LPA API. Such manipulation leads to improper authorization. The attack can only be initiated within the local network. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-285\", \"description\": \"Improper Authorization\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-266\", \"description\": \"Incorrect Privilege Assignment\"}]}], \"providerMetadata\": {\"orgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"shortName\": \"VulDB\", \"dateUpdated\": \"2026-08-03T04:45:07.095Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-18584\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-03T15:37:18.296Z\", \"dateReserved\": \"2026-08-02T19:23:56.933Z\", \"assignerOrgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"datePublished\": \"2026-08-03T04:45:07.095Z\", \"assignerShortName\": \"VulDB\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…