https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3460.htmlhttps://patchthecve.com/cve/CVE-2025-3460.htmlWed, 17 Jun 2026 09:19:59 +0000HIGH 7.7: The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:https://patchthecve.com/cve/CVE-2025-3459.htmlhttps://patchthecve.com/cve/CVE-2025-3459.htmlWed, 17 Jun 2026 09:19:59 +0000HIGH 7.7: The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:Uhttps://patchthecve.com/cve/CVE-2025-32459.htmlhttps://patchthecve.com/cve/CVE-2025-32459.htmlWed, 17 Jun 2026 09:12:01 +0000HIGH 7.7: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (https://patchthecve.com/cve/CVE-2025-32458.htmlhttps://patchthecve.com/cve/CVE-2025-32458.htmlWed, 17 Jun 2026 09:12:01 +0000HIGH 7.7: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a https://patchthecve.com/cve/CVE-2025-32457.htmlhttps://patchthecve.com/cve/CVE-2025-32457.htmlWed, 17 Jun 2026 09:12:01 +0000HIGH 7.7: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVhttps://patchthecve.com/cve/CVE-2025-32456.htmlhttps://patchthecve.com/cve/CVE-2025-32456.htmlWed, 17 Jun 2026 09:12:01 +0000HIGH 7.7: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSShttps://patchthecve.com/cve/CVE-2025-32455.htmlhttps://patchthecve.com/cve/CVE-2025-32455.htmlWed, 17 Jun 2026 09:12:01 +0000HIGH 7.7: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CV