https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-56132.htmlhttps://patchthecve.com/cve/CVE-2025-56132.htmlWed, 17 Jun 2026 09:42:24 +0000HIGH 7.3: LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existence of user accounts. Version 4.2 introduchttps://patchthecve.com/cve/CVE-2025-46094.htmlhttps://patchthecve.com/cve/CVE-2025-46094.htmlWed, 17 Jun 2026 09:25:55 +0000LOW 3.8: LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.https://patchthecve.com/cve/CVE-2025-46093.htmlhttps://patchthecve.com/cve/CVE-2025-46093.htmlWed, 17 Jun 2026 09:25:55 +0000CRITICAL 9.9: LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript feature and the sudoers configuration.