https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-30311.htmlhttps://patchthecve.com/cve/CVE-2022-30311.htmlWed, 17 Jun 2026 04:43:28 +0000CRITICAL 9.8: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.https://patchthecve.com/cve/CVE-2022-30310.htmlhttps://patchthecve.com/cve/CVE-2022-30310.htmlWed, 17 Jun 2026 04:43:27 +0000CRITICAL 9.8: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.https://patchthecve.com/cve/CVE-2022-30309.htmlhttps://patchthecve.com/cve/CVE-2022-30309.htmlWed, 17 Jun 2026 04:43:27 +0000CRITICAL 9.8: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.https://patchthecve.com/cve/CVE-2022-30308.htmlhttps://patchthecve.com/cve/CVE-2022-30308.htmlWed, 17 Jun 2026 04:43:27 +0000CRITICAL 9.8: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.