<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: sonoma d12 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-60969: Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-00</title><link>https://patchthecve.com/cve/CVE-2025-60969.html</link><guid>https://patchthecve.com/cve/CVE-2025-60969.html</guid><pubDate>Sun, 05 Jul 2026 17:17:20 +0000</pubDate><description>MEDIUM 5.7: Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information.</description></item><item><title>CVE-2025-60967: Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-</title><link>https://patchthecve.com/cve/CVE-2025-60967.html</link><guid>https://patchthecve.com/cve/CVE-2025-60967.html</guid><pubDate>Sun, 05 Jul 2026 17:17:20 +0000</pubDate><description>HIGH 7.3: Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information.</description></item><item><title>CVE-2025-60965: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0</title><link>https://patchthecve.com/cve/CVE-2025-60965.html</link><guid>https://patchthecve.com/cve/CVE-2025-60965.html</guid><pubDate>Sun, 05 Jul 2026 17:17:20 +0000</pubDate><description>CRITICAL 9.1: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly other unspecified impacts.</description></item><item><title>CVE-2025-60964: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0</title><link>https://patchthecve.com/cve/CVE-2025-60964.html</link><guid>https://patchthecve.com/cve/CVE-2025-60964.html</guid><pubDate>Sun, 05 Jul 2026 17:17:20 +0000</pubDate><description>CRITICAL 9.1: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly other unspecified impacts.</description></item><item><title>CVE-2025-60963: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0</title><link>https://patchthecve.com/cve/CVE-2025-60963.html</link><guid>https://patchthecve.com/cve/CVE-2025-60963.html</guid><pubDate>Sun, 05 Jul 2026 17:17:20 +0000</pubDate><description>HIGH 8.2: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information.</description></item><item><title>CVE-2025-60962: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0</title><link>https://patchthecve.com/cve/CVE-2025-60962.html</link><guid>https://patchthecve.com/cve/CVE-2025-60962.html</guid><pubDate>Sun, 05 Jul 2026 17:17:20 +0000</pubDate><description>HIGH 8.2: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts.</description></item><item><title>CVE-2025-60961: Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-</title><link>https://patchthecve.com/cve/CVE-2025-60961.html</link><guid>https://patchthecve.com/cve/CVE-2025-60961.html</guid><pubDate>Sun, 05 Jul 2026 17:17:19 +0000</pubDate><description>MEDIUM 6.1: Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information, and possibly other unspecified impacts.</description></item><item><title>CVE-2025-60960: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0</title><link>https://patchthecve.com/cve/CVE-2025-60960.html</link><guid>https://patchthecve.com/cve/CVE-2025-60960.html</guid><pubDate>Sun, 05 Jul 2026 17:17:19 +0000</pubDate><description>HIGH 8.2: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information.</description></item><item><title>CVE-2025-60959: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0</title><link>https://patchthecve.com/cve/CVE-2025-60959.html</link><guid>https://patchthecve.com/cve/CVE-2025-60959.html</guid><pubDate>Sun, 05 Jul 2026 17:17:19 +0000</pubDate><description>HIGH 8.2: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information.</description></item><item><title>CVE-2025-60958: Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-</title><link>https://patchthecve.com/cve/CVE-2025-60958.html</link><guid>https://patchthecve.com/cve/CVE-2025-60958.html</guid><pubDate>Sun, 05 Jul 2026 17:17:19 +0000</pubDate><description>HIGH 7.3: Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information.</description></item><item><title>CVE-2025-60957: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-0</title><link>https://patchthecve.com/cve/CVE-2025-60957.html</link><guid>https://patchthecve.com/cve/CVE-2025-60957.html</guid><pubDate>Sun, 05 Jul 2026 17:17:19 +0000</pubDate><description>CRITICAL 9.9: OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information.</description></item><item><title>CVE-2025-60956: Cross Site Request Forgery (CSRF) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/</title><link>https://patchthecve.com/cve/CVE-2025-60956.html</link><guid>https://patchthecve.com/cve/CVE-2025-60956.html</guid><pubDate>Sun, 05 Jul 2026 17:17:19 +0000</pubDate><description>HIGH 8.0: Cross Site Request Forgery (CSRF) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information.</description></item></channel></rss>