<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: rv130 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-24700: An OS command injection vulnerability exists in the start_lltd() function of the &quot;rc&quot; binary in Cisco RV130/RV</title><link>https://patchthecve.com/cve/CVE-2026-24700.html</link><guid>https://patchthecve.com/cve/CVE-2026-24700.html</guid><pubDate>Fri, 10 Jul 2026 17:49:52 +0000</pubDate><description>HIGH 7.2: An OS command injection vulnerability exists in the start_lltd() function of the &quot;rc&quot; binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The machine_name configuration parameter is not properly sanitized, which could allow an authenticated remote </description></item><item><title>CVE-2026-24699: An OS command injection vulnerability exists in the sub_34984() function of the &quot;rc&quot; binary in Cisco RV130/RV1</title><link>https://patchthecve.com/cve/CVE-2026-24699.html</link><guid>https://patchthecve.com/cve/CVE-2026-24699.html</guid><pubDate>Fri, 10 Jul 2026 17:50:43 +0000</pubDate><description>HIGH 7.2: An OS command injection vulnerability exists in the sub_34984() function of the &quot;rc&quot; binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The lan_ipv6_prefixlen configuration parameter is not properly sanitized, which could allow an authenticated re</description></item><item><title>CVE-2026-24698: An OS command injection vulnerability exists in the save_syslog_to_file() function of the &quot;httpd&quot; binary in Ci</title><link>https://patchthecve.com/cve/CVE-2026-24698.html</link><guid>https://patchthecve.com/cve/CVE-2026-24698.html</guid><pubDate>Fri, 10 Jul 2026 17:51:09 +0000</pubDate><description>HIGH 7.2: An OS command injection vulnerability exists in the save_syslog_to_file() function of the &quot;httpd&quot; binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The model_name configuration parameter is not properly sanitized, which could allow an authenticat</description></item><item><title>CVE-2026-24697: An OS command injection vulnerability exists in the start_bonjour() function of the &quot;rc&quot; binary in Cisco RV130</title><link>https://patchthecve.com/cve/CVE-2026-24697.html</link><guid>https://patchthecve.com/cve/CVE-2026-24697.html</guid><pubDate>Fri, 10 Jul 2026 17:54:30 +0000</pubDate><description>HIGH 7.2: An OS command injection vulnerability exists in the start_bonjour() function of the &quot;rc&quot; binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The wan_hostname configuration parameter is not properly sanitized, which could allow an authenticated remo</description></item></channel></rss>