<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: sma 100 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-32821: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin p</title><link>https://patchthecve.com/cve/CVE-2025-32821.html</link><guid>https://patchthecve.com/cve/CVE-2025-32821.html</guid><pubDate>Wed, 17 Jun 2026 09:12:37 +0000</pubDate><description>HIGH 7.2: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.</description></item><item><title>CVE-2025-32820: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path</title><link>https://patchthecve.com/cve/CVE-2025-32820.html</link><guid>https://patchthecve.com/cve/CVE-2025-32820.html</guid><pubDate>Wed, 17 Jun 2026 09:12:37 +0000</pubDate><description>HIGH 8.8: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.</description></item><item><title>CVE-2025-32819: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the pat</title><link>https://patchthecve.com/cve/CVE-2025-32819.html</link><guid>https://patchthecve.com/cve/CVE-2025-32819.html</guid><pubDate>Wed, 17 Jun 2026 09:12:37 +0000</pubDate><description>HIGH 8.8: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.</description></item></channel></rss>