<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: tloc100-100 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-59463: An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.</title><link>https://patchthecve.com/cve/CVE-2025-59463.html</link><guid>https://patchthecve.com/cve/CVE-2025-59463.html</guid><pubDate>Thu, 08 Oct 2026 11:10:00 +0000</pubDate><description>MEDIUM 4.3: An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.</description></item><item><title>CVE-2025-59462: An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting </title><link>https://patchthecve.com/cve/CVE-2025-59462.html</link><guid>https://patchthecve.com/cve/CVE-2025-59462.html</guid><pubDate>Thu, 08 Oct 2026 11:10:00 +0000</pubDate><description>MEDIUM 6.5: An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.</description></item><item><title>CVE-2025-59461: A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and d</title><link>https://patchthecve.com/cve/CVE-2025-59461.html</link><guid>https://patchthecve.com/cve/CVE-2025-59461.html</guid><pubDate>Thu, 08 Oct 2026 11:10:00 +0000</pubDate><description>HIGH 7.6: A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services.</description></item><item><title>CVE-2025-59460: The system is deployed in its default state, with configuration settings that do not comply with the latest be</title><link>https://patchthecve.com/cve/CVE-2025-59460.html</link><guid>https://patchthecve.com/cve/CVE-2025-59460.html</guid><pubDate>Sun, 18 Oct 2026 21:10:00 +0000</pubDate><description>HIGH 7.5: The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.</description></item><item><title>CVE-2025-59459: An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), </title><link>https://patchthecve.com/cve/CVE-2025-59459.html</link><guid>https://patchthecve.com/cve/CVE-2025-59459.html</guid><pubDate>Thu, 08 Oct 2026 11:10:00 +0000</pubDate><description>MEDIUM 5.5: An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.</description></item></channel></rss>