https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-32961.htmlhttps://patchthecve.com/cve/CVE-2021-32961.htmlWed, 17 Jun 2026 03:53:52 +0000HIGH 7.5: A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function looks https://patchthecve.com/cve/CVE-2021-32957.htmlhttps://patchthecve.com/cve/CVE-2021-32957.htmlWed, 17 Jun 2026 03:53:52 +0000HIGH 7.5: A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information collection executes multiple commands and summarizes the information into an XML. This function and subsequent process gives full path to the executable and is thhttps://patchthecve.com/cve/CVE-2021-32953.htmlhttps://patchthecve.com/cve/CVE-2021-32953.htmlWed, 17 Jun 2026 03:53:51 +0000CRITICAL 9.8: An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login.https://patchthecve.com/cve/CVE-2021-32949.htmlhttps://patchthecve.com/cve/CVE-2021-32949.htmlWed, 17 Jun 2026 03:53:51 +0000HIGH 7.5: An attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path and traversing the directory, allowing the replacement of an existing file with a malicious file.https://patchthecve.com/cve/CVE-2021-32945.htmlhttps://patchthecve.com/cve/CVE-2021-32945.htmlWed, 17 Jun 2026 03:53:50 +0000HIGH 7.5: An attacker could decipher the encryption and gain access to MDT AutoSave versions prior to v6.02.06.https://patchthecve.com/cve/CVE-2021-32937.htmlhttps://patchthecve.com/cve/CVE-2021-32937.htmlWed, 17 Jun 2026 03:53:50 +0000HIGH 7.5: An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave versions prior to v6.02.06. An attacker can leverage this knowledge to provide a malicious command to the working directory where the read and write activity can be inhttps://patchthecve.com/cve/CVE-2021-32933.htmlhttps://patchthecve.com/cve/CVE-2021-32933.htmlWed, 17 Jun 2026 03:53:49 +0000CRITICAL 10.0: An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSave versions prior to v6.02.06 and run a command line argument. This could then be leveraged to run a malicious process.