https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-10250.htmlhttps://patchthecve.com/cve/CVE-2020-10250.htmlWed, 17 Jun 2026 02:47:34 +0000CRITICAL 9.8: BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3.https://patchthecve.com/cve/CVE-2020-10249.htmlhttps://patchthecve.com/cve/CVE-2020-10249.htmlWed, 17 Jun 2026 02:47:34 +0000MEDIUM 5.3: BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to val_soft.php3.https://patchthecve.com/cve/CVE-2020-10248.htmlhttps://patchthecve.com/cve/CVE-2020-10248.htmlWed, 17 Jun 2026 02:47:33 +0000HIGH 7.5: BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3.