https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-29523.htmlhttps://patchthecve.com/cve/CVE-2025-29523.htmlWed, 17 Jun 2026 09:05:30 +0000HIGH 7.2: D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function.https://patchthecve.com/cve/CVE-2025-29522.htmlhttps://patchthecve.com/cve/CVE-2025-29522.htmlWed, 17 Jun 2026 09:05:30 +0000MEDIUM 6.5: D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping function.https://patchthecve.com/cve/CVE-2025-29521.htmlhttps://patchthecve.com/cve/CVE-2025-29521.htmlWed, 17 Jun 2026 09:05:29 +0000MEDIUM 5.3: Insecure default credentials for the Adminsitrator account of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to escalate privileges via a bruteforce attack.https://patchthecve.com/cve/CVE-2025-29520.htmlhttps://patchthecve.com/cve/CVE-2025-29520.htmlWed, 17 Jun 2026 09:05:29 +0000MEDIUM 5.3: Incorrect access control in the Maintenance module of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows authenticated attackers with low-level privileges to arbitrarily change the high-privileged account passwords and escalate privileges.https://patchthecve.com/cve/CVE-2025-29519.htmlhttps://patchthecve.com/cve/CVE-2025-29519.htmlWed, 17 Jun 2026 09:05:29 +0000MEDIUM 5.3: A command injection vulnerability in the EXE parameter of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to execute arbitrary commands via supplying a crafted GET request.https://patchthecve.com/cve/CVE-2025-29517.htmlhttps://patchthecve.com/cve/CVE-2025-29517.htmlWed, 17 Jun 2026 09:05:29 +0000MEDIUM 6.8: D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the traceroute6 function.https://patchthecve.com/cve/CVE-2025-29516.htmlhttps://patchthecve.com/cve/CVE-2025-29516.htmlWed, 17 Jun 2026 09:05:29 +0000HIGH 7.2: D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the backup function.https://patchthecve.com/cve/CVE-2025-29515.htmlhttps://patchthecve.com/cve/CVE-2025-29515.htmlWed, 17 Jun 2026 09:05:29 +0000CRITICAL 9.8: Incorrect access control in the DELT_file.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to modify arbitrary settings within the device's XML database, including the administrator’s password.https://patchthecve.com/cve/CVE-2025-29514.htmlhttps://patchthecve.com/cve/CVE-2025-29514.htmlWed, 17 Jun 2026 09:05:29 +0000CRITICAL 9.8: Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing a crafted web request.