https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13942.htmlhttps://patchthecve.com/cve/CVE-2025-13942.htmlWed, 17 Jun 2026 08:35:01 +0000CRITICAL 9.8: A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP SOAP requests.https://patchthecve.com/cve/CVE-2024-12010.htmlhttps://patchthecve.com/cve/CVE-2024-12010.htmlWed, 17 Jun 2026 06:58:52 +0000HIGH 7.2: A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.https://patchthecve.com/cve/CVE-2024-12009.htmlhttps://patchthecve.com/cve/CVE-2024-12009.htmlWed, 17 Jun 2026 06:58:52 +0000HIGH 7.2: A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device.https://patchthecve.com/cve/CVE-2024-9197.htmlhttps://patchthecve.com/cve/CVE-2024-9197.htmlWed, 17 Jun 2026 08:24:07 +0000MEDIUM 4.9: A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the wehttps://patchthecve.com/cve/CVE-2024-38266.htmlhttps://patchthecve.com/cve/CVE-2024-38266.htmlWed, 17 Jun 2026 07:39:49 +0000MEDIUM 4.9: An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread