<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: dar-7000 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-1800: A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical</title><link>https://patchthecve.com/cve/CVE-2025-1800.html</link><guid>https://patchthecve.com/cve/CVE-2025-1800.html</guid><pubDate>Wed, 17 Jun 2026 08:39:47 +0000</pubDate><description>MEDIUM 6.3: A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_details of the file /view/vpn/sxh_vpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. </description></item><item><title>CVE-2024-9004: A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912</title><link>https://patchthecve.com/cve/CVE-2024-9004.html</link><guid>https://patchthecve.com/cve/CVE-2024-9004.html</guid><pubDate>Wed, 17 Jun 2026 08:23:46 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function of the file /view/DBManage/Backup_Server_commit.php. The manipulation of the argument host leads to os command injection. It is possible to launch the attack remotely. The exploit</description></item><item><title>CVE-2024-6525: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20230922</title><link>https://patchthecve.com/cve/CVE-2024-6525.html</link><guid>https://patchthecve.com/cve/CVE-2024-6525.html</guid><pubDate>Wed, 17 Jun 2026 08:18:11 +0000</pubDate><description>LOW 2.7: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20230922. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to deserialization. The attack may be launch</description></item><item><title>CVE-2024-4965: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as</title><link>https://patchthecve.com/cve/CVE-2024-4965.html</link><guid>https://patchthecve.com/cve/CVE-2024-4965.html</guid><pubDate>Wed, 17 Jun 2026 08:03:17 +0000</pubDate><description>MEDIUM 6.3: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This issue affects some unknown processing of the file /useratte/resmanage.php. The manipulation of the argument load leads to os command injection. The attack may be initiated re</description></item><item><title>CVE-2024-4964: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000-40 V31R02B1413C and classifi</title><link>https://patchthecve.com/cve/CVE-2024-4964.html</link><guid>https://patchthecve.com/cve/CVE-2024-4964.html</guid><pubDate>Wed, 17 Jun 2026 08:03:17 +0000</pubDate><description>MEDIUM 6.3: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This vulnerability affects unknown code of the file /firewall/urlblist.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated re</description></item><item><title>CVE-2024-4963: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-700</title><link>https://patchthecve.com/cve/CVE-2024-4963.html</link><guid>https://patchthecve.com/cve/CVE-2024-4963.html</guid><pubDate>Wed, 17 Jun 2026 08:03:17 +0000</pubDate><description>MEDIUM 6.3: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000-40 V31R02B1413C. This affects an unknown part of the file /url/url.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to initiate the attack rem</description></item><item><title>CVE-2024-4962: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DA</title><link>https://patchthecve.com/cve/CVE-2024-4962.html</link><guid>https://patchthecve.com/cve/CVE-2024-4962.html</guid><pubDate>Wed, 17 Jun 2026 08:03:17 +0000</pubDate><description>MEDIUM 6.3: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000-40 V31R02B1413C. Affected by this issue is some unknown functionality of the file /useratte/resmanage.php. The manipulation of the argument file leads to unrestricted upload. The atta</description></item><item><title>CVE-2024-4961: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-7000-40 V31R02B</title><link>https://patchthecve.com/cve/CVE-2024-4961.html</link><guid>https://patchthecve.com/cve/CVE-2024-4961.html</guid><pubDate>Wed, 17 Jun 2026 08:03:16 +0000</pubDate><description>MEDIUM 6.3: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-7000-40 V31R02B1413C. Affected by this vulnerability is an unknown functionality of the file /user/onlineuser.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can </description></item><item><title>CVE-2024-4960: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000-40 V3</title><link>https://patchthecve.com/cve/CVE-2024-4960.html</link><guid>https://patchthecve.com/cve/CVE-2024-4960.html</guid><pubDate>Wed, 17 Jun 2026 08:03:16 +0000</pubDate><description>MEDIUM 6.3: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000-40 V31R02B1413C. Affected is an unknown function of the file interface/sysmanage/licenseauthorization.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possibl</description></item></channel></rss>