PatchTheCVE: deviceon\/iedgehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-64302: Insufficient input sanitization in the dashboard label or path can allow an attacker to trigger a device errohttps://patchthecve.com/cve/CVE-2025-64302.htmlhttps://patchthecve.com/cve/CVE-2025-64302.htmlWed, 17 Jun 2026 09:54:10 +0000MEDIUM 6.4: Insufficient input sanitization in the dashboard label or path can allow an attacker to trigger a device error causing information disclosure or data manipulation.CVE-2025-62630: Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse dhttps://patchthecve.com/cve/CVE-2025-62630.htmlhttps://patchthecve.com/cve/CVE-2025-62630.htmlWed, 07 Oct 2026 21:10:00 +0000HIGH 8.8: Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.CVE-2025-59171: Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse dhttps://patchthecve.com/cve/CVE-2025-59171.htmlhttps://patchthecve.com/cve/CVE-2025-59171.htmlWed, 07 Oct 2026 21:10:00 +0000HIGH 7.5: Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.CVE-2025-58423: Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a dehttps://patchthecve.com/cve/CVE-2025-58423.htmlhttps://patchthecve.com/cve/CVE-2025-58423.htmlWed, 07 Oct 2026 21:10:00 +0000HIGH 8.8: Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a denial-of-service condition, traverse directories, or read/write files, within the context of the local system account.