PatchTheCVE: toshibahttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-5569: An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier https://patchthecve.com/cve/CVE-2020-5569.htmlhttps://patchthecve.com/cve/CVE-2020-5569.htmlWed, 17 Jun 2026 03:21:37 +0000HIGH 8.4: An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is stored in CANVIO PREMIUM 3TB(HD-MB30TY, HD-MA30TY, HD-MB30TS, HD-MA30TS), CANVIO PREMIUM 2TB(HD-MB20TY, HD-MA20TY, HD-MB20TS, HD-MA20TS), CANVIO PREMIUM 1TB(HD-MB10TY, HD-MA10TY, HDCVE-2012-4981: Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerabilityhttps://patchthecve.com/cve/CVE-2012-4981.htmlhttps://patchthecve.com/cve/CVE-2012-4981.htmlTue, 16 Jun 2026 23:46:00 +0000HIGH 8.8: Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution VulnerabilityCVE-2012-4980: Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assistehttps://patchthecve.com/cve/CVE-2012-4980.htmlhttps://patchthecve.com/cve/CVE-2012-4980.htmlTue, 16 Jun 2026 23:45:59 +0000HIGH 7.8: Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code.CVE-2018-16201: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-chttps://patchthecve.com/cve/CVE-2018-16201.htmlhttps://patchthecve.com/cve/CVE-2018-16201.htmlWed, 17 Jun 2026 01:43:52 +0000HIGH 8.8: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands.CVE-2018-16200: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an ahttps://patchthecve.com/cve/CVE-2018-16200.htmlhttps://patchthecve.com/cve/CVE-2018-16200.htmlWed, 17 Jun 2026 01:43:52 +0000HIGH 8.8: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to execute arbitrary OS commands.CVE-2018-16199: Cross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway Hhttps://patchthecve.com/cve/CVE-2018-16199.htmlhttps://patchthecve.com/cve/CVE-2018-16199.htmlWed, 17 Jun 2026 01:43:52 +0000MEDIUM 6.1: Cross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an remote attacker to inject arbitrary web script or HTML via unspecified vectors.CVE-2018-16198: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier may allow ahttps://patchthecve.com/cve/CVE-2018-16198.htmlhttps://patchthecve.com/cve/CVE-2018-16198.htmlWed, 17 Jun 2026 01:43:52 +0000HIGH 8.8: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier may allow an attacker on the same network segment to access a non-documented developer screen to perform operations on the affected device.CVE-2018-16197: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an ahttps://patchthecve.com/cve/CVE-2018-16197.htmlhttps://patchthecve.com/cve/CVE-2018-16197.htmlWed, 17 Jun 2026 01:43:52 +0000MEDIUM 6.5: Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to bypass access restriction to access the information and files stored on the affected device.CVE-2017-2238: Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0https://patchthecve.com/cve/CVE-2017-2238.htmlhttps://patchthecve.com/cve/CVE-2017-2238.htmlWed, 17 Jun 2026 01:15:47 +0000HIGH 8.8: Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.CVE-2017-2237: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlierhttps://patchthecve.com/cve/CVE-2017-2237.htmlhttps://patchthecve.com/cve/CVE-2017-2237.htmlWed, 17 Jun 2026 01:15:47 +0000CRITICAL 9.8: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.CVE-2017-2236: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmwahttps://patchthecve.com/cve/CVE-2017-2236.htmlhttps://patchthecve.com/cve/CVE-2017-2236.htmlWed, 17 Jun 2026 01:15:47 +0000CRITICAL 9.8: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers to perform operations on device with administrative privileges.CVE-2017-2235: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlierhttps://patchthecve.com/cve/CVE-2017-2235.htmlhttps://patchthecve.com/cve/CVE-2017-2235.htmlWed, 17 Jun 2026 01:15:47 +0000CRITICAL 9.8: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to bypass access restriction to change the administrator account password via unspecified vectors.CVE-2017-2234: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmwahttps://patchthecve.com/cve/CVE-2017-2234.htmlhttps://patchthecve.com/cve/CVE-2017-2234.htmlWed, 17 Jun 2026 01:15:47 +0000CRITICAL 9.8: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier may allow remote attackers to access a non-documented developer screen to perform operations on device with administrative privileges.CVE-2017-2162: FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/https://patchthecve.com/cve/CVE-2017-2162.htmlhttps://patchthecve.com/cve/CVE-2017-2162.htmlWed, 17 Jun 2026 01:15:39 +0000MEDIUM 4.3: FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows default credentials to be set for wireless LAN connections to the product when enabling the PhotoShare function through a web browser.CVE-2017-2161: FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/https://patchthecve.com/cve/CVE-2017-2161.htmlhttps://patchthecve.com/cve/CVE-2017-2161.htmlWed, 17 Jun 2026 01:15:39 +0000LOW 3.5: FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows authenticated attackers to bypass access restrictions to obtain unauthorized image data via unspecified vectors.CVE-2016-4863: The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware version 1.00.04 and later, FlashAir SD-WD/WC https://patchthecve.com/cve/CVE-2016-4863.htmlhttps://patchthecve.com/cve/CVE-2016-4863.htmlWed, 17 Jun 2026 00:48:21 +0000MEDIUM 4.3: The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware version 1.00.04 and later, FlashAir SD-WD/WC series Class 10 model W-02 with firmware version 2.00.02 and later, FlashAir SD-WE series Class 10 model W-03, FlashAir Class 6 model with firmware version 1.00.04 and later, FlashAir II ClaCVE-2017-2149: Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC https://patchthecve.com/cve/CVE-2017-2149.htmlhttps://patchthecve.com/cve/CVE-2017-2149.htmlWed, 17 Jun 2026 01:15:38 +0000HIGH 8.8: Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card with eCVE-2016-4840: Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verhttps://patchthecve.com/cve/CVE-2016-4840.htmlhttps://patchthecve.com/cve/CVE-2016-4840.htmlWed, 17 Jun 2026 00:48:18 +0000MEDIUM 5.9: Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates.CVE-2014-4876: Toshiba 4690 Operating System 6 Release 3, when the ADXSITCF logical name is not properly restricted, allows rhttps://patchthecve.com/cve/CVE-2014-4876.htmlhttps://patchthecve.com/cve/CVE-2014-4876.htmlWed, 17 Jun 2026 00:10:43 +0000LOW 3.7: Toshiba 4690 Operating System 6 Release 3, when the ADXSITCF logical name is not properly restricted, allows remote attackers to read potentially sensitive system environment variables via a crafted request to TCP port 54138.CVE-2014-4875: CreateBossCredentials.jar in Toshiba CHEC before 6.6 build 4014 and 6.7 before build 4329 contains a hardcodedhttps://patchthecve.com/cve/CVE-2014-4875.htmlhttps://patchthecve.com/cve/CVE-2014-4875.htmlWed, 17 Jun 2026 00:10:43 +0000MEDIUM 5.0: CreateBossCredentials.jar in Toshiba CHEC before 6.6 build 4014 and 6.7 before build 4329 contains a hardcoded AES key, which allows attackers to discover Back Office System Server (BOSS) DB2 database credentials by leveraging knowledge of this key in conjunction with bossinfo.pro read access.CVE-2015-0884: Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Servichttps://patchthecve.com/cve/CVE-2015-0884.htmlhttps://patchthecve.com/cve/CVE-2015-0884.htmlWed, 17 Jun 2026 00:21:05 +0000MEDIUM 6.9: Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.