<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: itel</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-63224: The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validati</title><link>https://patchthecve.com/cve/CVE-2025-63224.html</link><guid>https://patchthecve.com/cve/CVE-2025-63224.html</guid><pubDate>Wed, 17 Jun 2026 09:52:58 +0000</pubDate><description>CRITICAL 10.0: The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the pa</description></item><item><title>CVE-2025-63219: The ITEL ISO FM SFN Adapter (firmware ISO2 2.0.0.0, WebServer 2.0) is vulnerable to session hijacking due to i</title><link>https://patchthecve.com/cve/CVE-2025-63219.html</link><guid>https://patchthecve.com/cve/CVE-2025-63219.html</guid><pubDate>Wed, 17 Jun 2026 09:52:58 +0000</pubDate><description>HIGH 7.5: The ITEL ISO FM SFN Adapter (firmware ISO2 2.0.0.0, WebServer 2.0) is vulnerable to session hijacking due to improper session management on the /home.html endpoint. An attacker can access an active session without authentication, allowing them to control the device, modify configurations, and compro</description></item><item><title>CVE-2025-63217: The Itel DAB MUX (IDMUX build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation </title><link>https://patchthecve.com/cve/CVE-2025-63217.html</link><guid>https://patchthecve.com/cve/CVE-2025-63217.html</guid><pubDate>Wed, 17 Jun 2026 09:52:57 +0000</pubDate><description>CRITICAL 9.8: The Itel DAB MUX (IDMUX build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passw</description></item><item><title>CVE-2025-63216: The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validat</title><link>https://patchthecve.com/cve/CVE-2025-63216.html</link><guid>https://patchthecve.com/cve/CVE-2025-63216.html</guid><pubDate>Wed, 17 Jun 2026 09:52:57 +0000</pubDate><description>CRITICAL 10.0: The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the p</description></item></channel></rss>