Enviar #873916: GL.iNet Router 4.8.x RCE

The ui.update_langs RPC method only checks that hour, min, and week are present when scheduling is enabled. It does not enforce numeric time fields before writing them to gl_timer.
●   Execute arbitrary commands as root.
●  Modify persistent router configuration.
●  Change DNS, firewall, NAT, routing, or Wi-Fi behavior.
●  Read sensitive files available to root.
●  Install persistence or alter scheduled tasks.
●  Pivot from the router into connected networks.
https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Language%20Auto-Update%20Cron%20RCE.md

• Fuente: ⚠️ https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Language%20Auto-Update%20Cron%20RCE.md
• Usuario: GLiNet (UID 96704)
• Sumisión: 2026-06-30 10:45 (hace 2 meses)
• Moderación: 2026-08-16 15:38 (2 months later)
• Estado: Aceptado
• Entrada de VulDB: 391162 [GL.iNet XE3000 hasta 4.8.x Language Update ui.update_langs hour/min/week escalada de privilegios]
• Puntos: 20