https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-68916.htmlhttps://patchthecve.com/cve/CVE-2025-68916.htmlWed, 07 Oct 2026 13:10:00 +0000CRITICAL 9.1: Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.https://patchthecve.com/cve/CVE-2025-68915.htmlhttps://patchthecve.com/cve/CVE-2025-68915.htmlWed, 07 Oct 2026 13:10:00 +0000MEDIUM 5.5: Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner.https://patchthecve.com/cve/CVE-2025-68914.htmlhttps://patchthecve.com/cve/CVE-2025-68914.htmlWed, 07 Oct 2026 13:10:00 +0000MEDIUM 6.5: Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table.