https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-10773.htmlhttps://patchthecve.com/cve/CVE-2025-10773.htmlWed, 17 Jun 2026 08:28:57 +0000HIGH 8.8: A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3. Affected by this issue is the function delshrpath of the file /goform/set_delshrpath_cfg of the component Web Management Interface. The manipulation of the argument Type results in stack-based buffer overflow. The attack may be perhttps://patchthecve.com/cve/CVE-2025-29063.htmlhttps://patchthecve.com/cve/CVE-2025-29063.htmlWed, 17 Jun 2026 09:05:06 +0000CRITICAL 9.8: An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/set_hidessid_cfg is not handled properly.https://patchthecve.com/cve/CVE-2025-29062.htmlhttps://patchthecve.com/cve/CVE-2025-29062.htmlWed, 17 Jun 2026 09:05:05 +0000CRITICAL 9.8: An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClient_cfg of the goahead webservice.