जमा करें #873918: GL.iNet Router 4.8.x RCE

Firewall-management RPC methods accept newline characters in stored firewall fields such as dest_port and dest_ip. Those values are later concatenated into conntrack cleanup commands when rules are changed or removed.
Impact
●  Execute arbitrary commands as root.
●  Modify persistent router configuration.
●  Change DNS, firewall, NAT, routing, or Wi-Fi behavior.
●  Read sensitive files available to root.
●  Install persistence or alter scheduled tasks.
●  Pivot from the router into connected networks.
https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Firewall%20Cleanup%20RCE.md

• स्रोत: ⚠️ https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Firewall%20Cleanup%20RCE.md
• उपयोगकर्ता: GLiNet (UID 96704)
• सबमिशन: 30/06/2026 10:47 AM (2 महीनों पहले)
• संयम: 16/08/2026 03:38 PM (2 months later)
• स्थिति: स्वीकृत
• VulDB प्रविष्टि: 391164 [GL.iNet BE9300/MT6000 4.8.x Firewall-management RPC dest_port/dest_ip अधिकार वृद्धि]
• अंक: 20