PatchTheCVE: freehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-24375: A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.https://patchthecve.com/cve/CVE-2020-24375.htmlhttps://patchthecve.com/cve/CVE-2020-24375.htmlWed, 17 Jun 2026 03:05:27 +0000MEDIUM 6.5: A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.CVE-2020-24377: A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.https://patchthecve.com/cve/CVE-2020-24377.htmlhttps://patchthecve.com/cve/CVE-2020-24377.htmlWed, 17 Jun 2026 03:05:27 +0000CRITICAL 9.6: A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.CVE-2020-24376: A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server bhttps://patchthecve.com/cve/CVE-2020-24376.htmlhttps://patchthecve.com/cve/CVE-2020-24376.htmlWed, 17 Jun 2026 03:05:27 +0000CRITICAL 9.6: A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3.CVE-2020-24374: A DNS rebinding vulnerability in Freebox v5 before 1.5.29.https://patchthecve.com/cve/CVE-2020-24374.htmlhttps://patchthecve.com/cve/CVE-2020-24374.htmlWed, 17 Jun 2026 03:05:27 +0000CRITICAL 9.6: A DNS rebinding vulnerability in Freebox v5 before 1.5.29.CVE-2020-24373: A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.https://patchthecve.com/cve/CVE-2020-24373.htmlhttps://patchthecve.com/cve/CVE-2020-24373.htmlWed, 17 Jun 2026 03:05:27 +0000HIGH 8.8: A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.CVE-2014-9382: Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creationhttps://patchthecve.com/cve/CVE-2014-9382.htmlhttps://patchthecve.com/cve/CVE-2014-9382.htmlWed, 17 Jun 2026 00:18:15 +0000MEDIUM 6.5: Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creationCVE-2014-9405: A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contactshttps://patchthecve.com/cve/CVE-2014-9405.htmlhttps://patchthecve.com/cve/CVE-2014-9405.htmlWed, 17 Jun 2026 00:18:18 +0000MEDIUM 5.4: A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code.