<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: dir-645 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-10689: A vulnerability was identified in D-Link DIR-645 105B01</title><link>https://patchthecve.com/cve/CVE-2025-10689.html</link><guid>https://patchthecve.com/cve/CVE-2025-10689.html</guid><pubDate>Wed, 17 Jun 2026 08:28:46 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function soapcgi_main of the file /soap.cgi. Such manipulation of the argument service leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. This vulnerabil</description></item><item><title>CVE-2018-25115: Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-81</title><link>https://patchthecve.com/cve/CVE-2018-25115.html</link><guid>https://patchthecve.com/cve/CVE-2018-25115.html</guid><pubDate>Wed, 17 Jun 2026 01:54:45 +0000</pubDate><description>CRITICAL 9.8: Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from imp</description></item><item><title>CVE-2025-7192: A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical</title><link>https://patchthecve.com/cve/CVE-2025-7192.html</link><guid>https://patchthecve.com/cve/CVE-2025-7192.html</guid><pubDate>Wed, 17 Jun 2026 10:04:28 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgi_main of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to</description></item></channel></rss>