https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-28173.htmlhttps://patchthecve.com/cve/CVE-2021-28173.htmlWed, 17 Jun 2026 03:45:57 +0000CRITICAL 9.8: The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files without login.https://patchthecve.com/cve/CVE-2021-28172.htmlhttps://patchthecve.com/cve/CVE-2021-28172.htmlWed, 17 Jun 2026 03:45:57 +0000HIGH 7.5: There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage.https://patchthecve.com/cve/CVE-2021-28171.htmlhttps://patchthecve.com/cve/CVE-2021-28171.htmlWed, 17 Jun 2026 03:45:57 +0000CRITICAL 9.8: The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie.