CVE-2026-19979 | GL.iNet XE3000 up to 4.8.x WebDAV Service COPY/MOVE authorization

August 16, 2026 Yanac

A vulnerability classified as critical was found in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this vulnerability is the function COPY/MOVE of the component WebDAV Service. Such manipulation leads to authorization bypass.

This vulnerability is referenced as CVE-2026-19979. It is possible to launch the attack remotely. No exploit is available.

The vendor explains: “After our investigation, we have confirmed that the vulnerability described (…) does indeed exist.”VulDB Recent EntriesRead More