PatchTheCVE: hr portalhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-5192: A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Humanhttps://patchthecve.com/cve/CVE-2025-5192.htmlhttps://patchthecve.com/cve/CVE-2025-5192.htmlWed, 17 Jun 2026 09:47:25 +0000HIGH 7.5: A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions.CVE-2025-48784: A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2https://patchthecve.com/cve/CVE-2025-48784.htmlhttps://patchthecve.com/cve/CVE-2025-48784.htmlWed, 17 Jun 2026 09:30:18 +0000HIGH 7.5: A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system settings without prior authorization.CVE-2025-48783: An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Reshttps://patchthecve.com/cve/CVE-2025-48783.htmlhttps://patchthecve.com/cve/CVE-2025-48783.htmlWed, 17 Jun 2026 09:30:18 +0000HIGH 7.5: An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to delete partial files by specifying arbitrary file paths.CVE-2025-48782: An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRDhttps://patchthecve.com/cve/CVE-2025-48782.htmlhttps://patchthecve.com/cve/CVE-2025-48782.htmlWed, 17 Jun 2026 09:30:17 +0000CRITICAL 9.8: An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.CVE-2025-48781: An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Rhttps://patchthecve.com/cve/CVE-2025-48781.htmlhttps://patchthecve.com/cve/CVE-2025-48781.htmlWed, 17 Jun 2026 09:30:17 +0000HIGH 7.5: An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to obtain partial files by specifying arbitrary file paths.CVE-2025-48780: A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resourhttps://patchthecve.com/cve/CVE-2025-48780.htmlhttps://patchthecve.com/cve/CVE-2025-48780.htmlWed, 17 Jun 2026 09:30:17 +0000CRITICAL 9.8: A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a crafted serialized object.