A vulnerability, which was classified as critical, has been found in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1. Affected by this issue is some unknown functionality of the component Factory Reset Handler. Performing a manipulation results in improper authentication.
This vulnerability is identified as CVE-2026-5959. The attack can be initiated remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
