PatchTheCVEcomet gl-rm1 firmware vulnerabilities and fixes
Recent CVEs affecting comet gl-rm1 firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: comet gl rm1 firmware, cometgl-rm1firmware.
comet gl-rm1 firmware has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-03-17. Highest priority: CVE-2026-32292 (score 43/100).
- CVE-2026-32293 LOW 3.7 UPGRADE The GL-iNet Comet (GL-RM1) KVM connects to a GL-iNet site during boot-up to provision client and CA certificat
- CVE-2026-32292 HIGH 7.5 UPGRADE The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to g
- CVE-2026-32291 MEDIUM 6.8 UPGRADE The GL-iNet Comet (GL-RM1) KVM before 1.8.2 does not require authentication on the UART serial console
- CVE-2026-32290 MEDIUM 4.7 UPGRADE The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded
FAQ
How do I fix comet gl-rm1 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is comet gl-rm1 firmware being exploited right now?
None of the tracked comet gl-rm1 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which comet gl-rm1 firmware CVE should I patch first?
CVE-2026-32292 currently ranks highest (43/100): The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to g.