https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-16201.htmlhttps://patchthecve.com/cve/CVE-2018-16201.htmlWed, 17 Jun 2026 01:43:52 +0000HIGH 8.8: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands.https://patchthecve.com/cve/CVE-2018-16200.htmlhttps://patchthecve.com/cve/CVE-2018-16200.htmlWed, 17 Jun 2026 01:43:52 +0000HIGH 8.8: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to execute arbitrary OS commands.https://patchthecve.com/cve/CVE-2018-16199.htmlhttps://patchthecve.com/cve/CVE-2018-16199.htmlWed, 17 Jun 2026 01:43:52 +0000MEDIUM 6.1: Cross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an remote attacker to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2018-16198.htmlhttps://patchthecve.com/cve/CVE-2018-16198.htmlWed, 17 Jun 2026 01:43:52 +0000HIGH 8.8: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier may allow an attacker on the same network segment to access a non-documented developer screen to perform operations on the affected device.https://patchthecve.com/cve/CVE-2018-16197.htmlhttps://patchthecve.com/cve/CVE-2018-16197.htmlWed, 17 Jun 2026 01:43:52 +0000MEDIUM 6.5: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to bypass access restriction to access the information and files stored on the affected device.https://patchthecve.com/cve/CVE-2017-2238.htmlhttps://patchthecve.com/cve/CVE-2017-2238.htmlWed, 17 Jun 2026 01:15:47 +0000HIGH 8.8: Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.https://patchthecve.com/cve/CVE-2017-2237.htmlhttps://patchthecve.com/cve/CVE-2017-2237.htmlWed, 17 Jun 2026 01:15:47 +0000CRITICAL 9.8: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.https://patchthecve.com/cve/CVE-2017-2236.htmlhttps://patchthecve.com/cve/CVE-2017-2236.htmlWed, 17 Jun 2026 01:15:47 +0000CRITICAL 9.8: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers to perform operations on device with administrative privileges.https://patchthecve.com/cve/CVE-2017-2235.htmlhttps://patchthecve.com/cve/CVE-2017-2235.htmlWed, 17 Jun 2026 01:15:47 +0000CRITICAL 9.8: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to bypass access restriction to change the administrator account password via unspecified vectors.https://patchthecve.com/cve/CVE-2017-2234.htmlhttps://patchthecve.com/cve/CVE-2017-2234.htmlWed, 17 Jun 2026 01:15:47 +0000CRITICAL 9.8: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier may allow remote attackers to access a non-documented developer screen to perform operations on device with administrative privileges.