https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-39086.htmlhttps://patchthecve.com/cve/CVE-2023-39086.htmlThu, 09 Jul 2026 01:18:35 +0000HIGH 7.5: ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext.https://patchthecve.com/cve/CVE-2018-18320.htmlhttps://patchthecve.com/cve/CVE-2018-18320.htmlWed, 17 Jun 2026 01:46:59 +0000CRITICAL 9.8: An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because exec.php has a popen call. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote code https://patchthecve.com/cve/CVE-2018-18319.htmlhttps://patchthecve.com/cve/CVE-2018-18319.htmlWed, 17 Jun 2026 01:46:59 +0000CRITICAL 9.8: An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because api.php has an eval call, as demonstrated by the /6/api.php?function=command&class=remote&Cc='ls' URI. NOTE: the vendor indicates that Merlin.PHP is designed only