GL-iNet Comet KVM CVE-2026-32291

Upgrade to GL-iNet Comet KVM firmware version 1.8.2 or later available at https://dl.gl-inet.com/release/kvm/release/RM1/1.8.2, which likely addresses the UART authentication bypass. Verify the patch includes authentication requirements for UART console access or disables UART in production builds. As immediate compensating controls, implement strict physical security for devices: deploy in locked cabinets or racks with tamper-evident seals, restrict physical access to authorized personnel only, and monitor for unauthorized device handling through video surveillance or access logs. For high-security environments, consider epoxy-filling UART pin headers after initial deployment to prevent physical connection (trade-off: eliminates legitimate debugging capability and may void warranty). Implement device integrity monitoring to detect firmware tampering if UART access occurs. Network segmentation can limit lateral movement if a KVM is compromised, but does not prevent the initial device compromise. Given the physical access requirement, prioritize these devices in environments where physical security is already robust rather than attempting to retrofit protection where physical controls are weak.