PatchTheCVE: re11s firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-22911: RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formiNICbasicREP funhttps://patchthecve.com/cve/CVE-2025-22911.htmlhttps://patchthecve.com/cve/CVE-2025-22911.htmlWed, 17 Jun 2026 08:50:55 +0000MEDIUM 5.6: RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formiNICbasicREP function.CVE-2025-22916: RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup funhttps://patchthecve.com/cve/CVE-2025-22916.htmlhttps://patchthecve.com/cve/CVE-2025-22916.htmlSun, 05 Jul 2026 01:21:23 +0000CRITICAL 9.8: RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function.CVE-2025-22913: RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup funchttps://patchthecve.com/cve/CVE-2025-22913.htmlhttps://patchthecve.com/cve/CVE-2025-22913.htmlWed, 17 Jun 2026 08:50:56 +0000CRITICAL 9.8: RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function.CVE-2025-22912: RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.https://patchthecve.com/cve/CVE-2025-22912.htmlhttps://patchthecve.com/cve/CVE-2025-22912.htmlSun, 05 Jul 2026 01:21:23 +0000CRITICAL 9.8: RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.CVE-2025-22907: RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey functhttps://patchthecve.com/cve/CVE-2025-22907.htmlhttps://patchthecve.com/cve/CVE-2025-22907.htmlSun, 05 Jul 2026 01:21:23 +0000CRITICAL 9.8: RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.CVE-2025-22906: RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /gofhttps://patchthecve.com/cve/CVE-2025-22906.htmlhttps://patchthecve.com/cve/CVE-2025-22906.htmlSun, 05 Jul 2026 01:21:22 +0000CRITICAL 9.8: RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN.CVE-2025-22905: RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mhttps://patchthecve.com/cve/CVE-2025-22905.htmlhttps://patchthecve.com/cve/CVE-2025-22905.htmlSun, 05 Jul 2026 01:21:22 +0000CRITICAL 9.8: RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.CVE-2025-22904: RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.https://patchthecve.com/cve/CVE-2025-22904.htmlhttps://patchthecve.com/cve/CVE-2025-22904.htmlSun, 05 Jul 2026 01:21:21 +0000CRITICAL 9.8: RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.