<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: dwr-2000m firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-28731: Cross Site Request Forgery vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR</title><link>https://patchthecve.com/cve/CVE-2024-28731.html</link><guid>https://patchthecve.com/cve/CVE-2024-28731.html</guid><pubDate>Wed, 17 Jun 2026 07:21:41 +0000</pubDate><description>MEDIUM 4.3: Cross Site Request Forgery vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to obtain sensitive information via the Port forwarding option.</description></item><item><title>CVE-2024-28730: Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M</title><link>https://patchthecve.com/cve/CVE-2024-28730.html</link><guid>https://patchthecve.com/cve/CVE-2024-28730.html</guid><pubDate>Wed, 17 Jun 2026 07:21:41 +0000</pubDate><description>MEDIUM 5.4: Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to obtain sensitive information via the file upload feature of the VPN configuration module.</description></item><item><title>CVE-2024-28729: An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local att</title><link>https://patchthecve.com/cve/CVE-2024-28729.html</link><guid>https://patchthecve.com/cve/CVE-2024-28729.html</guid><pubDate>Wed, 17 Jun 2026 07:21:41 +0000</pubDate><description>CRITICAL 9.8: An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary code via a crafted request.</description></item></channel></rss>