https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-50788.htmlhttps://patchthecve.com/cve/CVE-2022-50788.htmlWed, 17 Jun 2026 05:24:10 +0000HIGH 7.5: SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive log files. Attackers can directly browse the /log directory to retrieve system and sensitive information without authentication.https://patchthecve.com/cve/CVE-2022-50787.htmlhttps://patchthecve.com/cve/CVE-2022-50787.htmlWed, 17 Jun 2026 05:24:10 +0000HIGH 7.2: SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x contains an unauthenticated stored cross-site scripting vulnerability in the username parameter that allows attackers to inject malicious scripts. Attackers can exploit the unvalidated username input to execute arbitrary HTML and JavaScript code in victim bhttps://patchthecve.com/cve/CVE-2022-50696.htmlhttps://patchthecve.com/cve/CVE-2022-50696.htmlWed, 17 Jun 2026 05:24:01 +0000CRITICAL 9.8: SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain hardcoded credentials embedded in server binaries that cannot be modified through normal device operations. Attackers can leverage these static credentials to gain unauthorized access to the device across Linux and Windows distributions wihttps://patchthecve.com/cve/CVE-2022-50692.htmlhttps://patchthecve.com/cve/CVE-2022-50692.htmlWed, 17 Jun 2026 05:24:00 +0000HIGH 7.5: SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sessions and gain unauthorized access to the applicatihttps://patchthecve.com/cve/CVE-2023-53962.htmlhttps://patchthecve.com/cve/CVE-2023-53962.htmlWed, 17 Jun 2026 06:46:26 +0000HIGH 7.5: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated directory traversal vulnerability that allows remote attackers to write arbitrary files through the 'upgfile' parameter in upload.cgi. Attackers can exploit the vulnerability by sending crafted multipart form-data POST requests with direhttps://patchthecve.com/cve/CVE-2023-53960.htmlhttps://patchthecve.com/cve/CVE-2023-53960.htmlWed, 17 Jun 2026 06:46:25 +0000CRITICAL 9.8: SOUND4 IMPACT/FIRST/PULSE/Eco version 2.x contains an SQL injection vulnerability in the 'index.php' authentication mechanism that allows attackers to manipulate login credentials. Attackers can inject malicious SQL code through the 'password' POST parameter to bypass authentication and potentially https://patchthecve.com/cve/CVE-2023-53955.htmlhttps://patchthecve.com/cve/CVE-2023-53955.htmlWed, 17 Jun 2026 06:46:25 +0000CRITICAL 9.8: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the vulnerability by manipulating user-supplied input to execute privileged functionalities without pr