https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-22858.htmlhttps://patchthecve.com/cve/CVE-2021-22858.htmlWed, 17 Jun 2026 03:37:53 +0000HIGH 8.8: Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions.https://patchthecve.com/cve/CVE-2021-22857.htmlhttps://patchthecve.com/cve/CVE-2021-22857.htmlWed, 17 Jun 2026 03:37:53 +0000HIGH 7.5: The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily.https://patchthecve.com/cve/CVE-2021-22856.htmlhttps://patchthecve.com/cve/CVE-2021-22856.htmlWed, 17 Jun 2026 03:37:53 +0000CRITICAL 9.8: The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege.