https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-9528.htmlhttps://patchthecve.com/cve/CVE-2025-9528.htmlWed, 17 Jun 2026 10:09:10 +0000MEDIUM 4.7: A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of the file /goform/systemCommand. Executing manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit has been publicly dihttps://patchthecve.com/cve/CVE-2025-9527.htmlhttps://patchthecve.com/cve/CVE-2025-9527.htmlWed, 17 Jun 2026 10:09:10 +0000HIGH 8.8: A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function QoSSetup of the file /goform/QoSSetup. Performing manipulation of the argument ack_policy results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be usedhttps://patchthecve.com/cve/CVE-2025-9526.htmlhttps://patchthecve.com/cve/CVE-2025-9526.htmlWed, 17 Jun 2026 10:09:10 +0000HIGH 8.8: A vulnerability has been found in Linksys E1700 1.0.0.4.003. Affected by this issue is the function setSysAdm of the file /goform/setSysAdm. Such manipulation of the argument rm_port leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the publhttps://patchthecve.com/cve/CVE-2025-9525.htmlhttps://patchthecve.com/cve/CVE-2025-9525.htmlWed, 17 Jun 2026 10:09:10 +0000HIGH 8.8: A flaw has been found in Linksys E1700 1.0.0.4.003. Affected by this vulnerability is the function setWan of the file /goform/setWan. This manipulation of the argument DeviceName/lanIp causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may behttps://patchthecve.com/cve/CVE-2024-22544.htmlhttps://patchthecve.com/cve/CVE-2024-22544.htmlWed, 17 Jun 2026 07:11:32 +0000HIGH 8.0: An issue was discovered in Linksys Router E1700 version 1.0.04 (build 3), allows authenticated attackers to execute arbitrary code via the setDateTime function.https://patchthecve.com/cve/CVE-2024-22543.htmlhttps://patchthecve.com/cve/CVE-2024-22543.htmlWed, 17 Jun 2026 07:11:32 +0000MEDIUM 6.1: An issue was discovered in Linksys Router E1700 1.0.04 (build 3), allows authenticated attackers to escalate privileges via a crafted GET request to the /goform/* URI or via the ExportSettings function.