https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-2863.htmlhttps://patchthecve.com/cve/CVE-2024-2863.htmlWed, 17 Jun 2026 07:25:42 +0000MEDIUM 5.3: This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.https://patchthecve.com/cve/CVE-2024-2862.htmlhttps://patchthecve.com/cve/CVE-2024-2862.htmlWed, 17 Jun 2026 07:25:42 +0000CRITICAL 9.1: This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant. https://patchthecve.com/cve/CVE-2023-4616.htmlhttps://patchthecve.com/cve/CVE-2023-4616.htmlWed, 17 Jun 2026 06:38:13 +0000HIGH 7.5: This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/thumbnail endpoint. The issue results from the lack of proper validation https://patchthecve.com/cve/CVE-2023-4615.htmlhttps://patchthecve.com/cve/CVE-2023-4615.htmlWed, 17 Jun 2026 06:38:13 +0000HIGH 7.5: This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. The issue results from the lack of proper vhttps://patchthecve.com/cve/CVE-2023-4614.htmlhttps://patchthecve.com/cve/CVE-2023-4614.htmlWed, 17 Jun 2026 06:38:13 +0000CRITICAL 9.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/installation/setThumbnailRc endpoint. The issue results from the lack of proper vhttps://patchthecve.com/cve/CVE-2023-4613.htmlhttps://patchthecve.com/cve/CVE-2023-4613.htmlWed, 17 Jun 2026 06:38:13 +0000CRITICAL 9.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue results from the lack of proper validation of