https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-58462.htmlhttps://patchthecve.com/cve/CVE-2025-58462.htmlWed, 30 Sep 2026 23:10:00 +0000CRITICAL 9.8: OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database.https://patchthecve.com/cve/CVE-2025-54834.htmlhttps://patchthecve.com/cve/CVE-2025-54834.htmlWed, 17 Jun 2026 09:40:47 +0000MEDIUM 5.3: OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query the /App/CreateRequest.aspx endpoint to check for the existence of valid usernames. There are no rate-limiting mechanisms in place.https://patchthecve.com/cve/CVE-2025-54833.htmlhttps://patchthecve.com/cve/CVE-2025-54833.htmlWed, 17 Jun 2026 09:40:46 +0000MEDIUM 5.3: OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPTCHA protections. Unauthenticated remote attackers can more easily brute force passwords.https://patchthecve.com/cve/CVE-2025-54832.htmlhttps://patchthecve.com/cve/CVE-2025-54832.htmlWed, 17 Jun 2026 09:40:46 +0000MEDIUM 4.3: OPEXUS FOIAXpress Public Access Link (PAL), version v11.1.0, allows an authenticated user to add entries to the list of states and territories.https://patchthecve.com/cve/CVE-2024-53553.htmlhttps://patchthecve.com/cve/CVE-2024-53553.htmlWed, 17 Jun 2026 08:08:58 +0000CRITICAL 9.1: An issue in OPEXUS FOIAXPRESS PUBLIC ACCESS LINK v11.1.0 allows attackers to bypass authentication via crafted web requests.