https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-66262.htmlhttps://patchthecve.com/cve/CVE-2025-66262.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Tar extraction with -C / allow arbitrary file overwrite via crafted archive. Thhttps://patchthecve.com/cve/CVE-2025-66261.htmlhttps://patchthecve.com/cve/CVE-2025-66261.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Unauthenticated OS Command Injection (restore_settings.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform URL-decoded name parameter passed to exec() allows remote code execution. The https://patchthecve.com/cve/CVE-2025-66260.htmlhttps://patchthecve.com/cve/CVE-2025-66260.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 6.5: PostgreSQL SQL Injection (status_sql.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in status_sql.php. The `status_sql.php` endpoint constrhttps://patchthecve.com/cve/CVE-2025-66259.htmlhttps://patchthecve.com/cve/CVE-2025-66259.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform in main_ok.php user supplied data/hour/time is passed directly https://patchthecve.com/cve/CVE-2025-66257.htmlhttps://patchthecve.com/cve/CVE-2025-66257.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.1: Unauthenticated Arbitrary File Deletion (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deletepatch parameter allows unauthenticated deletion of arbitrary files.https://patchthecve.com/cve/CVE-2025-66256.htmlhttps://patchthecve.com/cve/CVE-2025-66256.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Unauthenticated Arbitrary File Upload (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Unrestricted file upload in patch_contents.php allows uploading malicious fileshttps://patchthecve.com/cve/CVE-2025-66254.htmlhttps://patchthecve.com/cve/CVE-2025-66254.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.1: Unauthenticated Arbitrary File Deletion (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deleteupgrade parameter allows unauthenticated deletion of arbitrary fihttps://patchthecve.com/cve/CVE-2025-66253.htmlhttps://patchthecve.com/cve/CVE-2025-66253.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Unauthenticated OS Command Injection (start_upgrade.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform User input passed directly to exec() allows remote code execution via start_upgrahttps://patchthecve.com/cve/CVE-2025-66252.htmlhttps://patchthecve.com/cve/CVE-2025-66252.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.5: Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Infinite loop when unlink() fails in status_contents.php causing DoS. Due to the https://patchthecve.com/cve/CVE-2025-66251.htmlhttps://patchthecve.com/cve/CVE-2025-66251.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.1: Unauthenticated Path Traversal with Arbitrary File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deletehidden parameter allows path traversal deletion of arbitrary .tgz fihttps://patchthecve.com/cve/CVE-2025-66250.htmlhttps://patchthecve.com/cve/CVE-2025-66250.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Unauthenticated Arbitrary File Upload (status_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Allows unauthenticated arbitrary file upload via /var/tdf/status_contents.php.https://patchthecve.com/cve/CVE-2025-63229.htmlhttps://patchthecve.com/cve/CVE-2025-63229.htmlWed, 17 Jun 2026 09:52:59 +0000MEDIUM 5.4: The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site Scripting (XSS) vulnerability in the /main0.php endpoint. By injecting a malicious JavaScript payload into the ?m= query parameter, an attacker can execute arbitrary code in the victim's brohttps://patchthecve.com/cve/CVE-2025-63228.htmlhttps://patchthecve.com/cve/CVE-2025-63228.htmlWed, 17 Jun 2026 09:52:59 +0000CRITICAL 9.8: The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file (e.g., a PHP webshell) to the server. The uploadehttps://patchthecve.com/cve/CVE-2025-63227.htmlhttps://patchthecve.com/cve/CVE-2025-63227.htmlWed, 17 Jun 2026 09:52:59 +0000HIGH 7.2: The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credentials can upload arbitrary files (e.g., PHP webshells), which are stored in the /patch/ directory. This a