https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-6899.htmlhttps://patchthecve.com/cve/CVE-2025-6899.htmlWed, 17 Jun 2026 10:02:49 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in D-Link DI-7300G+ and DI-8200G 17.12.20A1/19.12.25A1. This affects an unknown part of the file msp_info.htm. The manipulation of the argument flag/cmd/iface leads to os command injection. It is possible to initiate the attack remotely. Thttps://patchthecve.com/cve/CVE-2025-6898.htmlhttps://patchthecve.com/cve/CVE-2025-6898.htmlWed, 17 Jun 2026 10:02:49 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. Affected by this issue is some unknown functionality of the file in proxy_client.asp. The manipulation of the argument proxy_srv/proxy_lanport/proxy_lanip/proxy_srvport leads to os command injection. Thhttps://patchthecve.com/cve/CVE-2025-6897.htmlhttps://patchthecve.com/cve/CVE-2025-6897.htmlWed, 17 Jun 2026 10:02:49 +0000MEDIUM 5.5: A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpd_debug.asp. The manipulation of the argument Time leads to os command injection. The exploit has been disclosed to the public and may be used.https://patchthecve.com/cve/CVE-2025-6896.htmlhttps://patchthecve.com/cve/CVE-2025-6896.htmlWed, 17 Jun 2026 10:02:49 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wget_test.asp. The manipulation of the argument url leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the pub