https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-62947.htmlhttps://patchthecve.com/cve/CVE-2026-62947.htmlTue, 21 Jul 2026 16:06:10 +0000MEDIUM 4.9: OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi-download handler in cgi-io authorizes the requested path against the caller's ubus session file ACL before canonicalization, and rpcd session.c uses fnmatch() without FNM_PATHNAME, allowing traversal such as anhttps://patchthecve.com/cve/CVE-2026-62948.htmlhttps://patchthecve.com/cve/CVE-2026-62948.htmlTue, 21 Jul 2026 16:06:30 +0000CRITICAL 9.6: OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhcpd.leases through src/statefiles.c statefiles_write_state6() and statefiles_write_state4() without escaping, allowing newline injection of forged leashttps://patchthecve.com/cve/CVE-2026-55490.htmlhttps://patchthecve.com/cve/CVE-2026-55490.htmlFri, 10 Jul 2026 17:37:00 +0000MEDIUM 6.5: OpenWrt is a Linux operating system targeting embedded devices. Before v25.12.5, an integer underflow in handle_send_a() of the Emergency Access Daemon allows any unauthenticated attacker on the local network to crash the daemon by sending a single crafted UDP packet. The message length underflows b