<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: rx 1500 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-26065: A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to e</title><link>https://patchthecve.com/cve/CVE-2025-26065.html</link><guid>https://patchthecve.com/cve/CVE-2025-26065.html</guid><pubDate>Wed, 17 Jun 2026 09:01:27 +0000</pubDate><description>HIGH 7.3: A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a visiting Wi-Fi network.</description></item><item><title>CVE-2025-26064: A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to e</title><link>https://patchthecve.com/cve/CVE-2025-26064.html</link><guid>https://patchthecve.com/cve/CVE-2025-26064.html</guid><pubDate>Wed, 17 Jun 2026 09:01:27 +0000</pubDate><description>HIGH 7.3: A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a connnected device.</description></item><item><title>CVE-2025-26063: An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to execute arbitrary c</title><link>https://patchthecve.com/cve/CVE-2025-26063.html</link><guid>https://patchthecve.com/cve/CVE-2025-26063.html</guid><pubDate>Wed, 17 Jun 2026 09:01:27 +0000</pubDate><description>CRITICAL 9.8: An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to execute arbitrary code via injecting a crafted payload into the ESSID name when creating a network.</description></item><item><title>CVE-2025-26062: An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to acce</title><link>https://patchthecve.com/cve/CVE-2025-26062.html</link><guid>https://patchthecve.com/cve/CVE-2025-26062.html</guid><pubDate>Wed, 17 Jun 2026 09:01:26 +0000</pubDate><description>CRITICAL 9.8: An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router&#x27;s settings file and obtain potentially sensitive information from the current settings.</description></item><item><title>CVE-2025-50405: Intelbras RX1500 Router v2.2.17 and before is vulnerable to Incorrect Access Control in the FirmwareUpload fun</title><link>https://patchthecve.com/cve/CVE-2025-50405.html</link><guid>https://patchthecve.com/cve/CVE-2025-50405.html</guid><pubDate>Wed, 17 Jun 2026 09:35:03 +0000</pubDate><description>MEDIUM 6.5: Intelbras RX1500 Router v2.2.17 and before is vulnerable to Incorrect Access Control in the FirmwareUpload function and GetFirmwareValidation function.</description></item><item><title>CVE-2025-50404: Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow</title><link>https://patchthecve.com/cve/CVE-2025-50404.html</link><guid>https://patchthecve.com/cve/CVE-2025-50404.html</guid><pubDate>Wed, 17 Jun 2026 09:35:03 +0000</pubDate><description>MEDIUM 5.3: Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when processing the &quot;command&quot; field of the http header, causing the array to cross the boundary and overwrite other fields in the array.</description></item></channel></rss>