https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-45348.htmlhttps://patchthecve.com/cve/CVE-2024-45348.htmlWed, 17 Jun 2026 07:54:04 +0000MEDIUM 6.4: Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an attacker can exploit this vulnerability to execute arbitrary code.https://patchthecve.com/cve/CVE-2023-26324.htmlhttps://patchthecve.com/cve/CVE-2023-26324.htmlWed, 17 Jun 2026 05:43:03 +0000HIGH 8.8: A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code.https://patchthecve.com/cve/CVE-2023-26323.htmlhttps://patchthecve.com/cve/CVE-2023-26323.htmlWed, 17 Jun 2026 05:43:03 +0000HIGH 7.6: A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers to execute arbitrary code.https://patchthecve.com/cve/CVE-2023-26322.htmlhttps://patchthecve.com/cve/CVE-2023-26322.htmlWed, 17 Jun 2026 05:43:03 +0000HIGH 8.8: A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code.https://patchthecve.com/cve/CVE-2023-26321.htmlhttps://patchthecve.com/cve/CVE-2023-26321.htmlWed, 17 Jun 2026 05:43:03 +0000MEDIUM 6.3: A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file.https://patchthecve.com/cve/CVE-2023-26315.htmlhttps://patchthecve.com/cve/CVE-2023-26315.htmlWed, 17 Jun 2026 05:43:02 +0000MEDIUM 6.5: The Xiaomi router AX9000 has a post-authentication command injection vulnerability. This vulnerability is caused by the lack of input filtering, allowing an attacker to exploit it to obtain root access to the device.https://patchthecve.com/cve/CVE-2024-37664.htmlhttps://patchthecve.com/cve/CVE-2024-37664.htmlWed, 17 Jun 2026 07:38:45 +0000MEDIUM 5.2: Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router.https://patchthecve.com/cve/CVE-2024-37663.htmlhttps://patchthecve.com/cve/CVE-2024-37663.htmlWed, 17 Jun 2026 07:38:44 +0000MEDIUM 4.1: Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the victim and any remote server by sending out forged ICMP redirect messages.https://patchthecve.com/cve/CVE-2024-4406.htmlhttps://patchthecve.com/cve/CVE-2024-4406.htmlWed, 17 Jun 2026 08:01:49 +0000CRITICAL 9.6: Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the tarhttps://patchthecve.com/cve/CVE-2024-4405.htmlhttps://patchthecve.com/cve/CVE-2024-4405.htmlWed, 17 Jun 2026 08:01:49 +0000CRITICAL 9.6: Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the target m