<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: corega</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2017-10854: Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login p</title><link>https://patchthecve.com/cve/CVE-2017-10854.html</link><guid>https://patchthecve.com/cve/CVE-2017-10854.html</guid><pubDate>Wed, 17 Jun 2026 01:00:49 +0000</pubDate><description>HIGH 8.8: Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vectors.</description></item><item><title>CVE-2017-10853: Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary command</title><link>https://patchthecve.com/cve/CVE-2017-10853.html</link><guid>https://patchthecve.com/cve/CVE-2017-10853.html</guid><pubDate>Wed, 17 Jun 2026 01:00:49 +0000</pubDate><description>HIGH 8.8: Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.</description></item><item><title>CVE-2017-10852: Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code vi</title><link>https://patchthecve.com/cve/CVE-2017-10852.html</link><guid>https://patchthecve.com/cve/CVE-2017-10852.html</guid><pubDate>Wed, 17 Jun 2026 01:00:49 +0000</pubDate><description>HIGH 8.8: Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors.</description></item><item><title>CVE-2017-10814: Buffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary code </title><link>https://patchthecve.com/cve/CVE-2017-10814.html</link><guid>https://patchthecve.com/cve/CVE-2017-10814.html</guid><pubDate>Wed, 17 Jun 2026 01:00:45 +0000</pubDate><description>MEDIUM 6.8: Buffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary code via unspecified vectors.</description></item><item><title>CVE-2017-10813: CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecif</title><link>https://patchthecve.com/cve/CVE-2017-10813.html</link><guid>https://patchthecve.com/cve/CVE-2017-10813.html</guid><pubDate>Wed, 17 Jun 2026 01:00:45 +0000</pubDate><description>MEDIUM 6.8: CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.</description></item><item><title>CVE-2016-7811: Corega CG-WLR300NX firmware Ver</title><link>https://patchthecve.com/cve/CVE-2016-7811.html</link><guid>https://patchthecve.com/cve/CVE-2016-7811.html</guid><pubDate>Wed, 17 Jun 2026 00:53:32 +0000</pubDate><description>HIGH 8.8: Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors.</description></item><item><title>CVE-2016-7810: Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver</title><link>https://patchthecve.com/cve/CVE-2016-7810.html</link><guid>https://patchthecve.com/cve/CVE-2016-7810.html</guid><pubDate>Wed, 17 Jun 2026 00:53:32 +0000</pubDate><description>MEDIUM 4.8: Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.</description></item><item><title>CVE-2016-7809: Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver</title><link>https://patchthecve.com/cve/CVE-2016-7809.html</link><guid>https://patchthecve.com/cve/CVE-2016-7809.html</guid><pubDate>Wed, 17 Jun 2026 00:53:32 +0000</pubDate><description>HIGH 8.8: Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors.</description></item><item><title>CVE-2016-7808: Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arb</title><link>https://patchthecve.com/cve/CVE-2016-7808.html</link><guid>https://patchthecve.com/cve/CVE-2016-7808.html</guid><pubDate>Wed, 17 Jun 2026 00:53:32 +0000</pubDate><description>MEDIUM 6.1: Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</description></item></channel></rss>