https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1459.htmlhttps://patchthecve.com/cve/CVE-2026-1459.htmlWed, 17 Jun 2026 10:15:49 +0000HIGH 7.2: A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on an affected devichttps://patchthecve.com/cve/CVE-2025-13943.htmlhttps://patchthecve.com/cve/CVE-2025-13943.htmlWed, 17 Jun 2026 08:35:01 +0000HIGH 8.8: A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an authenticated attacker to execute operating system (OS) commands on an affected device.https://patchthecve.com/cve/CVE-2025-11848.htmlhttps://patchthecve.com/cve/CVE-2025-11848.htmlWed, 17 Jun 2026 08:31:17 +0000MEDIUM 4.9: A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-se