<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: ac1900 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-1610: A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and classified as critical</title><link>https://patchthecve.com/cve/CVE-2025-1610.html</link><guid>https://patchthecve.com/cve/CVE-2025-1610.html</guid><pubDate>Wed, 17 Jun 2026 08:39:27 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by this issue is the function websGetVar of the file /goform/set_blacklist. The manipulation of the argument mac/enable leads to os command injection. The attack may be launched remotely. The exploit has be</description></item><item><title>CVE-2025-1609: A vulnerability has been found in LB-LINK AC1900 Router 1.0.2 and classified as critical</title><link>https://patchthecve.com/cve/CVE-2025-1609.html</link><guid>https://patchthecve.com/cve/CVE-2025-1609.html</guid><pubDate>Wed, 17 Jun 2026 08:39:27 +0000</pubDate><description>MEDIUM 6.3: A vulnerability has been found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by this vulnerability is the function websGetVar of the file /goform/set_cmd. The manipulation of the argument cmd leads to os command injection. The attack can be launched remotely. The exploit has be</description></item><item><title>CVE-2025-1608: A vulnerability, which was classified as critical, was found in LB-LINK AC1900 Router 1.0.2</title><link>https://patchthecve.com/cve/CVE-2025-1608.html</link><guid>https://patchthecve.com/cve/CVE-2025-1608.html</guid><pubDate>Wed, 17 Jun 2026 08:39:27 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in LB-LINK AC1900 Router 1.0.2. Affected is the function websGetVar of the file /goform/set_manpwd. The manipulation of the argument routepwd  leads to os command injection. It is possible to launch the attack remotely. The exploit has bee</description></item></channel></rss>