https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-33760.htmlhttps://patchthecve.com/cve/CVE-2023-33760.htmlWed, 17 Jun 2026 06:02:15 +0000MEDIUM 5.3: SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow attackers to eavesdrop on communications via a man-in-the-middle attack.https://patchthecve.com/cve/CVE-2023-33759.htmlhttps://patchthecve.com/cve/CVE-2023-33759.htmlWed, 17 Jun 2026 06:02:14 +0000CRITICAL 9.8: SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentication via a brute force attack.https://patchthecve.com/cve/CVE-2023-33758.htmlhttps://patchthecve.com/cve/CVE-2023-33758.htmlWed, 17 Jun 2026 06:02:14 +0000MEDIUM 6.1: Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the CLIENT_NAME and DEVICE_GUID fields in the login component.