CVE-2026-5959

MediumCVSS 6.6/10Last modified Oct 26, 2026

Description

A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1. Affected by this issue is some unknown functionality of the component Factory Reset Handler. Performing a manipulation results in improper authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 1.8.2 can resolve this issue. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published
Apr 9, 2026
Last modified
Oct 26, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-595937.8In tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local escalation of CVE-2026-595947.8In spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local escalation of privCVE-2026-595957.5In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion due to a resourCVE-2026-595968.4In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coprocessor due to an insecurCVE-2026-59597In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissions across configuratiCVE-2026-59598In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after free. This could lead to local escalCVE-2026-59604.3A weakness has been identified in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /db/hcpms.sqlCVE-2026-59601In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remCVE-2026-596037.5In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message retCVE-2026-59604In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error. This could lead CVE-2026-59606In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure software due to a permissiCVE-2026-59607In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic error in the code. This c
CVE-2026-5959: Medium severity, CVSS 6.6 | Vulnix