https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-9026.htmlhttps://patchthecve.com/cve/CVE-2025-9026.htmlWed, 17 Jun 2026 10:08:10 +0000HIGH 7.3: A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgi_main of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclohttps://patchthecve.com/cve/CVE-2024-37605.htmlhttps://patchthecve.com/cve/CVE-2024-37605.htmlWed, 17 Jun 2026 07:38:39 +0000MEDIUM 6.5: A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.https://patchthecve.com/cve/CVE-2024-42812.htmlhttps://patchthecve.com/cve/CVE-2024-42812.htmlWed, 17 Jun 2026 07:50:03 +0000CRITICAL 9.8: In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.https://patchthecve.com/cve/CVE-2024-41611.htmlhttps://patchthecve.com/cve/CVE-2024-41611.htmlWed, 17 Jun 2026 07:47:55 +0000CRITICAL 9.8: In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands.