<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: imomobile</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-27692: The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabiliti</title><link>https://patchthecve.com/cve/CVE-2020-27692.html</link><guid>https://patchthecve.com/cve/CVE-2020-27692.html</guid><pubDate>Wed, 17 Jun 2026 03:09:29 +0000</pubDate><description>HIGH 8.8: The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within its web management portal. Attackers can, for example, use this to update the TR-069 configuration server settings (responsible for managing devices remotely). This makes it possib</description></item><item><title>CVE-2020-27691: The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 allows XSS via URLBlocking Settings,</title><link>https://patchthecve.com/cve/CVE-2020-27691.html</link><guid>https://patchthecve.com/cve/CVE-2020-27691.html</guid><pubDate>Wed, 17 Jun 2026 03:09:29 +0000</pubDate><description>MEDIUM 6.1: The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 allows XSS via URLBlocking Settings, SNMP Settings, and System Log Settings.</description></item><item><title>CVE-2020-27690: The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains a buffer overflow within it</title><link>https://patchthecve.com/cve/CVE-2020-27690.html</link><guid>https://patchthecve.com/cve/CVE-2020-27690.html</guid><pubDate>Wed, 17 Jun 2026 03:09:29 +0000</pubDate><description>MEDIUM 5.5: The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains a buffer overflow within its web management portal. When a POST request is sent to /boaform/admin/formDOMAINBLK with a large blkDomain value, the Boa server crashes.</description></item><item><title>CVE-2020-27689: The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin </title><link>https://patchthecve.com/cve/CVE-2020-27689.html</link><guid>https://patchthecve.com/cve/CVE-2020-27689.html</guid><pubDate>Wed, 17 Jun 2026 03:09:29 +0000</pubDate><description>CRITICAL 9.8: The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin credentials for the web management interface. A remote attacker could exploit this vulnerability to login and execute commands on the device, as well as upgrade the firmware image to a malic</description></item></channel></rss>