Invia #873916: GL.iNet Router 4.8.x RCE

The ui.update_langs RPC method only checks that hour, min, and week are present when scheduling is enabled. It does not enforce numeric time fields before writing them to gl_timer.
●   Execute arbitrary commands as root.
●  Modify persistent router configuration.
●  Change DNS, firewall, NAT, routing, or Wi-Fi behavior.
●  Read sensitive files available to root.
●  Install persistence or alter scheduled tasks.
●  Pivot from the router into connected networks.
https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Language%20Auto-Update%20Cron%20RCE.md

• Fonte: ⚠️ https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Language%20Auto-Update%20Cron%20RCE.md
• Utente: GLiNet (UID 96704)
• Sottomissione: 30/06/2026 10:45 (2 mesi fa)
• Moderazione: 16/08/2026 15:38 (2 months later)
• Stato: Accettato
• Voce VulDB: 391162 [GL.iNet XE3000 fino a 4.8.x Language Update ui.update_langs hour/min/week escalationi di privilegi]
• Punti: 20