CVE-2026-11505

A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This affects an unknown function of the component glnassys. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is reported as difficult. Upgrading to version 4.9.0 mitigates this issue. Upgrading the affected component is advised.

• CWE-320
• CWE-321

• https://cloud-static-test.gl-inet.cn/security/openwrt-ipq60xx-glinet_ax1800-squashfs-sysupgrade.tar
• https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/The%20hard%20coded%20default%20authentication%20token%20in%20gl%20nas%20sys%20poses%20a%20risk%20to%20unauthorized%20command%20execution.md
• https://vuldb.com/cve/CVE-2026-11505
• https://vuldb.com/submit/835698
• https://vuldb.com/vuln/369125
• https://vuldb.com/vuln/369125/cti

Published

Jun 8, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-1150A security flaw has been discovered in Totolink LR350 9.3.5u…8.8
• CVE-2026-11500A vulnerability was identified in Weaviate up to 1.37.7. Thi…5
• CVE-2026-11501A security flaw has been discovered in SourceCodester Hospit…7.3
• CVE-2026-11502A weakness has been identified in JeecgBoot up to 3.9.2. Imp…3.1
• CVE-2026-11503A security vulnerability has been detected in Tenda CX12L 16…8.8
• CVE-2026-11504A vulnerability was detected in Tenda CX12L 16.03.53.12. The…8.8
• CVE-2026-11506A vulnerability has been found in CodeAstro Leave Management…6.3
• CVE-2026-11507A vulnerability was found in CodeAstro Leave Management Syst…6.3
• CVE-2026-11508A vulnerability was determined in CodeAstro Leave Management…6.3
• CVE-2026-11509A vulnerability was identified in CodeAstro Leave Management…6.3
• CVE-2026-1151A weakness has been identified in technical-laohu mpay up to…5.4
• CVE-2026-11510A security flaw has been discovered in CodeAstro Leave Manag…6.3