https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-2765.htmlhttps://patchthecve.com/cve/CVE-2025-2765.htmlWed, 17 Jun 2026 09:07:35 +0000HIGH 8.8: CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of CarlinKit CPC200-CCPA devices. Authentication is not required to exploit this vulnerability. https://patchthecve.com/cve/CVE-2025-2764.htmlhttps://patchthecve.com/cve/CVE-2025-2764.htmlWed, 17 Jun 2026 09:07:35 +0000HIGH 8.0: CarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of CarlinKit CPC200-CCPA devices. Although authentication is required to exploit thhttps://patchthecve.com/cve/CVE-2025-2763.htmlhttps://patchthecve.com/cve/CVE-2025-2763.htmlWed, 17 Jun 2026 09:07:35 +0000MEDIUM 6.8: CarlinKit CPC200-CCPA Improper Verification of Cryptographic Signature Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of CarlinKit CPC200-CCPA devices. Authentication is not required to exploit this vulnerabilihttps://patchthecve.com/cve/CVE-2025-2762.htmlhttps://patchthecve.com/cve/CVE-2025-2762.htmlWed, 17 Jun 2026 09:07:34 +0000HIGH 7.8: CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of CarlinKit CPC200-CCPA devices. An attacker must first obtain the ability to execute low-privileged code on the target sy