https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-26219.htmlhttps://patchthecve.com/cve/CVE-2023-26219.htmlWed, 17 Jun 2026 05:42:51 +0000HIGH 7.4: The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and TIBCO Runtime Agent contain a vulnerability that theoretically allows an attacker with access to the Hawk Console’s and Aghttps://patchthecve.com/cve/CVE-2022-41564.htmlhttps://patchthecve.com/cve/CVE-2022-41564.htmlWed, 17 Jun 2026 05:03:23 +0000MEDIUM 6.8: The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EMS transport password and EMS SSL password to a privileged user. Affected releases are TIBCO Software Inc.'s TIBCO Hawk: versions 6.1.0 throughttps://patchthecve.com/cve/CVE-2021-3020.htmlhttps://patchthecve.com/cve/CVE-2021-3020.htmlWed, 17 Jun 2026 04:04:34 +0000HIGH 8.8: An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combihttps://patchthecve.com/cve/CVE-2022-29167.htmlhttps://patchthecve.com/cve/CVE-2022-29167.htmlWed, 17 Jun 2026 04:39:43 +0000HIGH 7.4: Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, request URI, host, and optionally the request payload. Hawk used a regular expression to parse `Host` HTTP https://patchthecve.com/cve/CVE-2020-35458.htmlhttps://patchthecve.com/cve/CVE-2020-35458.htmlWed, 17 Jun 2026 03:13:44 +0000CRITICAL 9.8: An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout routine could be used by unauthenticated remote attackers to execute code as hauser.https://patchthecve.com/cve/CVE-2016-2515.htmlhttps://patchthecve.com/cve/CVE-2016-2515.htmlWed, 17 Jun 2026 00:44:12 +0000HIGH 7.5: Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service (CPU consumption or partial outage) via a long (1) header or (2) URI that is matched against an improper regular expression.