<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: iboot</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-3327: A vulnerability was found in iteaj iboot 物联网网关 1.1.3 and classified as problematic</title><link>https://patchthecve.com/cve/CVE-2025-3327.html</link><guid>https://patchthecve.com/cve/CVE-2025-3327.html</guid><pubDate>Wed, 17 Jun 2026 09:19:40 +0000</pubDate><description>LOW 3.5: A vulnerability was found in iteaj iboot 物联网网关 1.1.3 and classified as problematic. This issue affects some unknown processing of the file /common/upload/batch of the component File Upload. The manipulation of the argument File leads to cross site scripting. The attack may be initiated remotely. The</description></item><item><title>CVE-2025-3326: A vulnerability has been found in iteaj iboot 物联网网关 1.1.3 and classified as problematic</title><link>https://patchthecve.com/cve/CVE-2025-3326.html</link><guid>https://patchthecve.com/cve/CVE-2025-3326.html</guid><pubDate>Wed, 17 Jun 2026 09:19:40 +0000</pubDate><description>LOW 3.5: A vulnerability has been found in iteaj iboot 物联网网关 1.1.3 and classified as problematic. This vulnerability affects unknown code of the file /common/upload of the component File Upload. The manipulation of the argument File leads to cross site scripting. The attack can be initiated remotely. The exp</description></item><item><title>CVE-2025-3325: A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3</title><link>https://patchthecve.com/cve/CVE-2025-3325.html</link><guid>https://patchthecve.com/cve/CVE-2025-3325.html</guid><pubDate>Wed, 17 Jun 2026 09:19:40 +0000</pubDate><description>MEDIUM 4.3: A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3. This affects an unknown part of the file /core/admin/pwd of the component Admin Password Handler. The manipulation of the argument ID leads to improper access controls. It is possible to initiate the attack r</description></item></channel></rss>