https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-26563.htmlhttps://patchthecve.com/cve/CVE-2022-26563.htmlWed, 17 Jun 2026 04:35:22 +0000HIGH 8.8: An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper PAM-authorization.https://patchthecve.com/cve/CVE-2019-11455.htmlhttps://patchthecve.com/cve/CVE-2019-11455.htmlWed, 17 Jun 2026 02:12:55 +0000HIGH 8.1: A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also cause a denial of service (application outage).https://patchthecve.com/cve/CVE-2019-11454.htmlhttps://patchthecve.com/cve/CVE-2019-11454.htmlWed, 17 Jun 2026 02:12:55 +0000MEDIUM 6.1: Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introduce arbitrary JavaScript via manipulation of an unsanitized user field of the Authorization header for HTTP Basic Authentication, which is mishandled during an https://patchthecve.com/cve/CVE-2019-11393.htmlhttps://patchthecve.com/cve/CVE-2019-11393.htmlWed, 17 Jun 2026 02:12:50 +0000CRITICAL 9.8: An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by requesting a password change and specifying the admin parameter.https://patchthecve.com/cve/CVE-2016-7067.htmlhttps://patchthecve.com/cve/CVE-2016-7067.htmlWed, 17 Jun 2026 00:52:31 +0000MEDIUM 6.5: Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enable monitoring for a specific service.