<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: wgr-500 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-54406: Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411</title><link>https://patchthecve.com/cve/CVE-2025-54406.html</link><guid>https://patchthecve.com/cve/CVE-2025-54406.html</guid><pubDate>Thu, 08 Oct 2026 22:10:00 +0000</pubDate><description>HIGH 8.8: Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command inj</description></item><item><title>CVE-2025-54405: Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411</title><link>https://patchthecve.com/cve/CVE-2025-54405.html</link><guid>https://patchthecve.com/cve/CVE-2025-54405.html</guid><pubDate>Thu, 08 Oct 2026 22:10:00 +0000</pubDate><description>HIGH 8.8: Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command inj</description></item><item><title>CVE-2025-54404: Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b1909</title><link>https://patchthecve.com/cve/CVE-2025-54404.html</link><guid>https://patchthecve.com/cve/CVE-2025-54404.html</guid><pubDate>Thu, 08 Oct 2026 22:10:00 +0000</pubDate><description>HIGH 8.8: Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related to </description></item><item><title>CVE-2025-54403: Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b1909</title><link>https://patchthecve.com/cve/CVE-2025-54403.html</link><guid>https://patchthecve.com/cve/CVE-2025-54403.html</guid><pubDate>Thu, 08 Oct 2026 22:10:00 +0000</pubDate><description>HIGH 8.8: Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related to </description></item><item><title>CVE-2025-54402: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 </title><link>https://patchthecve.com/cve/CVE-2025-54402.html</link><guid>https://patchthecve.com/cve/CVE-2025-54402.html</guid><pubDate>Thu, 08 Oct 2026 22:10:00 +0000</pubDate><description>HIGH 8.8: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buff</description></item><item><title>CVE-2025-54401: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 </title><link>https://patchthecve.com/cve/CVE-2025-54401.html</link><guid>https://patchthecve.com/cve/CVE-2025-54401.html</guid><pubDate>Thu, 08 Oct 2026 22:10:00 +0000</pubDate><description>HIGH 8.8: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buff</description></item><item><title>CVE-2025-54400: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 </title><link>https://patchthecve.com/cve/CVE-2025-54400.html</link><guid>https://patchthecve.com/cve/CVE-2025-54400.html</guid><pubDate>Thu, 08 Oct 2026 22:10:00 +0000</pubDate><description>HIGH 8.8: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buff</description></item><item><title>CVE-2025-54399: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 </title><link>https://patchthecve.com/cve/CVE-2025-54399.html</link><guid>https://patchthecve.com/cve/CVE-2025-54399.html</guid><pubDate>Thu, 08 Oct 2026 22:10:00 +0000</pubDate><description>HIGH 8.8: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buff</description></item><item><title>CVE-2025-48826: A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912</title><link>https://patchthecve.com/cve/CVE-2025-48826.html</link><guid>https://patchthecve.com/cve/CVE-2025-48826.html</guid><pubDate>Thu, 08 Oct 2026 22:10:00 +0000</pubDate><description>HIGH 8.8: A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to memory corruption. An attacker can send a series of HTTP requests to trigger this vulnerability.</description></item></channel></rss>