CVE-2026-18584

Name of the Vulnerable Software and Affected Versions GL.iNet E5800 versions prior to 20260707 GL.iNet E750 versions prior to 20260707 GL.iNet X2000 versions prior to 20260707 GL.iNet X3000 versions prior to 20260707 GL.iNet XE3000 versions prior to 20260707 GL.iNet XE300 versions prior to 20260707

Description A flaw in the eSIM LPA API component allows for improper authorization. This issue occurs within the /sdk/v1 file and can be exploited by an attacker located within the local network.

Recommendations Update GL.iNet E5800 to a version released after 20260707. Update GL.iNet E750 to a version released after 20260707. Update GL.iNet X2000 to a version released after 20260707. Update GL.iNet X3000 to a version released after 20260707. Update GL.iNet XE3000 to a version released after 20260707. Update GL.iNet XE300 to a version released after 20260707.