https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-36234.htmlhttps://patchthecve.com/cve/CVE-2021-36234.htmlWed, 17 Jun 2026 03:58:33 +0000MEDIUM 5.5: Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors.https://patchthecve.com/cve/CVE-2021-36233.htmlhttps://patchthecve.com/cve/CVE-2021-36233.htmlWed, 17 Jun 2026 03:58:33 +0000MEDIUM 6.5: The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.https://patchthecve.com/cve/CVE-2021-36232.htmlhttps://patchthecve.com/cve/CVE-2021-36232.htmlWed, 17 Jun 2026 03:58:33 +0000HIGH 8.8: Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to escalate privileges.https://patchthecve.com/cve/CVE-2021-36231.htmlhttps://patchthecve.com/cve/CVE-2021-36231.htmlWed, 17 Jun 2026 03:58:33 +0000HIGH 8.8: Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands by crafting serialized objects.