What is the CVSS score of CVE-2025-67091?

CVE-2025-67091 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Ax1800 Firmware are affected by CVE-2025-67091?

Organizations using GL Inet GL.Inet AX1800 should be aware of notable risk from CVE-2025-67091 rated CVSS 6.5. Exploitation could compromise the security of affected deployments.

Is there a public PoC exploit available for CVE-2025-67091?

Yes, a public proof-of-concept exploit is available for CVE-2025-67091. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2025-67091?

Within 30 days: Identify affected systems running GL Inet GL.Inet AX1800 and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Ax1800 Firmware CVE-2025-67091

MEDIUM

Improper Restriction of Excessive Authentication Attempts (CWE-307)

2026-01-08 cve@mitre.org

Authentication Bypass Ax1800 Firmware Gl Inet

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Jan 16, 2026 - 21:28 vuln.today

Public exploit code

CVE Published

Jan 08, 2026 - 16:15 nvd

MEDIUM 6.5

DescriptionCVE.org

An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6.4 & 4.6.8 in the GL.iNet custom opkg wrapper script located at /usr/libexec/opkg-call. The script is executed with root privileges when triggered via the LuCI web interface or authenticated API calls to manage packages. The vulnerable code uses shell redirection to create a lock file in the world-writable /tmp directory.

AnalysisAI

Ax1800 Firmware versions up to 4.2.0 is affected by improper restriction of excessive authentication attempts (CVSS 6.5).

Technical ContextAI

This vulnerability (CWE-307: Improper Restriction of Excessive Authentication Attempts) exists in the LuCI web component. in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6.4 & 4.6.8 in the GL.iNet custom opkg wrapper script located at /usr/libexec/opkg-call. The script is executed with root privileges when triggered via the LuCI web interface or authenticated API calls to manage packages. The vulnerable code uses shell redirection to create a lock file in the world-writable /tmp directory.