Vendor
GL-iNet
- CVEs tracked · all time
- 4
- in CISA KEV · all time
- 0
- articles · since 11 Sep
- 0
- article · all time
- 1
One article so farA coverage timeline appears once a second report names GL-iNet. Until then: The Hacker News, Wed 18 Mar, 13:08 UTC.
Products: Comet KVM
CVEs
4 CVEsCVE-2026-32292GL-iNet Comet (GL-RM1) KVM insufficient login rate-limitingCVSS9.3Critical–Not in KEV0.6%EPSS1article
CVE-2026-32291GL-iNet Comet (GL-RM1) KVM unauthenticated root access via UART serial consoleCVSS7.0High–Not in KEV0.3%EPSS1article
CVE-2026-32290GL-iNet Comet (GL-RM1) KVM insufficient firmware verificationCVSS7.0High–Not in KEV0.2%EPSS1article
CVE-2026-32293GL-iNet Comet (GL-RM1) KVM insufficient certificate validationCVSS3.7Low–Not in KEV0.3%EPSS1article
- 9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four VendorsThe Hacker News · first in our coverage