ax1800 firmware vulnerabilities and fixes

Recent CVEs affecting ax1800 firmware, with upgrade or downgrade steps. 14 tracked.

Also searched as: ax1800firmware.

ax1800 firmware has 14 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-01-08. Highest priority: CVE-2024-39226 (score 69/100).

• CVE-2025-66848 CRITICAL 9.8 UPGRADE UPGRADE JD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 (4.5.1.r4533 a
• CVE-2025-67091 MEDIUM 6.5 MITIGATE An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable
• CVE-2025-67090 MEDIUM 5.1 MITIGATE The LuCI web interface on Gl Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable
• CVE-2024-45263 HIGH 8.8 MITIGATE UPGRADE An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.
• CVE-2024-45262 HIGH 8.8 UPGRADE UPGRADE An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.
• CVE-2024-45261 HIGH 8.0 UPGRADE UPGRADE An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.
• CVE-2024-45260 HIGH 8.0 MITIGATE MITIGATE An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.
• CVE-2024-45259 MEDIUM 6.5 MITIGATE UPGRADE An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.
• CVE-2024-39229 MEDIUM 5.3 MITIGATE MITIGATE An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/
• CVE-2024-39228 CRITICAL 9.8 MITIGATE MITIGATE GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT18
• CVE-2024-39227 CRITICAL 9.8 MITIGATE MITIGATE GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT18
• CVE-2024-39226 CRITICAL 9.8 MITIGATE MITIGATE GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT18
• CVE-2024-39225 CRITICAL 9.8 MITIGATE MITIGATE GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT18
• CVE-2024-28077 HIGH 7.5 MITIGATE MITIGATE A denial-of-service issue was discovered on certain GL-iNet devices

FAQ

How do I fix ax1800 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ax1800 firmware being exploited right now?

None of the tracked ax1800 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ax1800 firmware CVE should I patch first?

CVE-2024-39226 currently ranks highest (69/100): GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT18.

RSS feed for ax1800 firmware · ← Back to latest CVEs