https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-57587.htmlhttps://patchthecve.com/cve/CVE-2024-57587.htmlWed, 17 Jun 2026 08:13:43 +0000CRITICAL 9.1: Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to /api/auth/login.https://patchthecve.com/cve/CVE-2024-55062.htmlhttps://patchthecve.com/cve/CVE-2024-55062.htmlWed, 17 Jun 2026 08:10:56 +0000CRITICAL 9.8: Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/license/sendlicense/.https://patchthecve.com/cve/CVE-2024-53357.htmlhttps://patchthecve.com/cve/CVE-2024-53357.htmlWed, 17 Jun 2026 08:08:50 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1) add an admin user via the /api/user/addalias route; (2) modifiy a user via the /api/user/updatealiasroute; (4) delete users via the /api/user/dhttps://patchthecve.com/cve/CVE-2024-53356.htmlhttps://patchthecve.com/cve/CVE-2024-53356.htmlWed, 17 Jun 2026 08:08:49 +0000CRITICAL 9.8: Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as "somerandomaccesstoken". A weak HMAC secret poses a risk because attackers can use the predichttps://patchthecve.com/cve/CVE-2024-53355.htmlhttps://patchthecve.com/cve/CVE-2024-53355.htmlWed, 17 Jun 2026 08:08:49 +0000HIGH 8.8: Multiple incorrect access control issues in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1) add an admin user via the /api/user/addalias route; (2) modifiy a user via the /api/user/updatealias route; (4) delete users via the /api/usehttps://patchthecve.com/cve/CVE-2024-53354.htmlhttps://patchthecve.com/cve/CVE-2024-53354.htmlWed, 17 Jun 2026 08:08:49 +0000MEDIUM 6.5: Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers to execute arbitrary SQL commands via the (1) user parameter to /api/management/findfilterlist; the (2) user or (3) filter parameter to /api/audit/findmetawatcher; the (4)