CVE-2026-32292
The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.
Published Mar 17, 2026 · updated Jun 17, 2026 · gl-inet comet gl-rm1 firmware
The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 17, 2026 · NIST NVD
Detected
The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.
Jun 17, 2026 · NIST NVD
Updated
The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.
Affected
- cpe gl-inet/comet gl-rm1 firmwareversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-32292
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-32292
The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.
nvd.nist.gov