<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: vap2500 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-5196: A vulnerability classified as critical has been found in Arris VAP2500 08.50</title><link>https://patchthecve.com/cve/CVE-2024-5196.html</link><guid>https://patchthecve.com/cve/CVE-2024-5196.html</guid><pubDate>Wed, 17 Jun 2026 08:15:23 +0000</pubDate><description>MEDIUM 4.7: A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /tools_command.php. The manipulation of the argument cmb_header/txt_command leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclose</description></item><item><title>CVE-2024-5195: A vulnerability was found in Arris VAP2500 08.50</title><link>https://patchthecve.com/cve/CVE-2024-5195.html</link><guid>https://patchthecve.com/cve/CVE-2024-5195.html</guid><pubDate>Wed, 17 Jun 2026 08:15:23 +0000</pubDate><description>MEDIUM 4.7: A vulnerability was found in Arris VAP2500 08.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file /diag_s.php. The manipulation of the argument customer_info leads to command injection. The attack may be launched remotely. The exploit has been disclose</description></item><item><title>CVE-2024-5194: A vulnerability was found in Arris VAP2500 08.50</title><link>https://patchthecve.com/cve/CVE-2024-5194.html</link><guid>https://patchthecve.com/cve/CVE-2024-5194.html</guid><pubDate>Wed, 17 Jun 2026 08:15:23 +0000</pubDate><description>MEDIUM 4.7: A vulnerability was found in Arris VAP2500 08.50. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /assoc_table.php. The manipulation of the argument id leads to command injection. The attack can be launched remotely. The exploit has been discl</description></item></channel></rss>