A vulnerability, which was classified as critical , was found in GL.iNet GL-MT3000 4.4.5 . This impacts the function snprintf of the file /cgi-bin/glc of the component FTP Protocol Handler . Executing a manipulation of the argument media_dir can lead to command injection. This vulnerability is registered as CVE-2026-11451 . It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component. The vendor explains: "In version 4.8.1, before writing media