https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-25915.htmlhttps://patchthecve.com/cve/CVE-2023-25915.htmlWed, 17 Jun 2026 05:42:15 +0000CRITICAL 9.9: Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.https://patchthecve.com/cve/CVE-2023-25914.htmlhttps://patchthecve.com/cve/CVE-2023-25914.htmlWed, 17 Jun 2026 05:42:15 +0000HIGH 8.8: Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.https://patchthecve.com/cve/CVE-2023-25913.htmlhttps://patchthecve.com/cve/CVE-2023-25913.htmlWed, 17 Jun 2026 05:42:15 +0000HIGH 7.5: Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.