https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-21488.htmlhttps://patchthecve.com/cve/CVE-2024-21488.htmlSat, 04 Jul 2026 16:17:12 +0000HIGH 7.3: Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child_process exec function without input sanitization. If (attacker-controlled) user input is given to the mac_address_for function of the package, it is possible for the attacker to executehttps://patchthecve.com/cve/CVE-2022-24394.htmlhttps://patchthecve.com/cve/CVE-2022-24394.htmlWed, 17 Jun 2026 04:31:45 +0000HIGH 8.8: Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “update_checkfile” value for the “filename” parameter. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost ahttps://patchthecve.com/cve/CVE-2022-24393.htmlhttps://patchthecve.com/cve/CVE-2022-24393.htmlWed, 17 Jun 2026 04:31:45 +0000HIGH 8.8: Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “check_vertica_upgrade” value for the “cpIp” parameter. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost https://patchthecve.com/cve/CVE-2022-24392.htmlhttps://patchthecve.com/cve/CVE-2022-24392.htmlWed, 17 Jun 2026 04:31:45 +0000HIGH 8.8: Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “feed_comm_test” value for the “feed” parameter. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost and rethttps://patchthecve.com/cve/CVE-2022-24391.htmlhttps://patchthecve.com/cve/CVE-2022-24391.htmlWed, 17 Jun 2026 04:31:45 +0000HIGH 8.8: Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.https://patchthecve.com/cve/CVE-2022-24390.htmlhttps://patchthecve.com/cve/CVE-2022-24390.htmlWed, 17 Jun 2026 04:31:45 +0000HIGH 8.8: Vulnerability in rconfig “remote_text_file” enables an attacker with user level access to the CLI to inject user level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. The vulnerability is present in Fidelishttps://patchthecve.com/cve/CVE-2022-24389.htmlhttps://patchthecve.com/cve/CVE-2022-24389.htmlWed, 17 Jun 2026 04:31:45 +0000HIGH 8.8: Vulnerability in rconfig “cert_utils” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. The vulnerability is present in Fidelis Netwohttps://patchthecve.com/cve/CVE-2022-24388.htmlhttps://patchthecve.com/cve/CVE-2022-24388.htmlWed, 17 Jun 2026 04:31:44 +0000HIGH 8.8: Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. The vulnerability is present in Fidelis Network andhttps://patchthecve.com/cve/CVE-2022-0997.htmlhttps://patchthecve.com/cve/CVE-2022-0997.htmlWed, 17 Jun 2026 04:21:37 +0000LOW 3.9: Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected script files, which could result in arbitrary commands being run as root upon subsequent logon by a roothttps://patchthecve.com/cve/CVE-2022-0486.htmlhttps://patchthecve.com/cve/CVE-2022-0486.htmlWed, 17 Jun 2026 04:20:42 +0000MEDIUM 4.4: Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and enable escalation of privileges equivalent to the root user. The vulnerability is prehttps://patchthecve.com/cve/CVE-2021-35050.htmlhttps://patchthecve.com/cve/CVE-2021-35050.htmlWed, 17 Jun 2026 03:57:02 +0000MEDIUM 6.5: User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could be decoded and used to login to the application. The vulnerability is present in Fidelis Network and Deception versions https://patchthecve.com/cve/CVE-2021-35049.htmlhttps://patchthecve.com/cve/CVE-2021-35049.htmlWed, 17 Jun 2026 03:57:02 +0000CRITICAL 9.9: Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost and return results in an HTTP response in an authenticated sessiohttps://patchthecve.com/cve/CVE-2021-35048.htmlhttps://patchthecve.com/cve/CVE-2021-35048.htmlWed, 17 Jun 2026 03:57:02 +0000CRITICAL 9.8: Vulnerability in Fidelis Network and Deception CommandPost enables unauthenticated SQL injection through the web interface. The vulnerability could lead to exposure of authentication tokens in some versions of Fidelis software. The vulnerability is present in Fidelis Network and Deception versions phttps://patchthecve.com/cve/CVE-2021-35047.htmlhttps://patchthecve.com/cve/CVE-2021-35047.htmlWed, 17 Jun 2026 03:57:02 +0000CRITICAL 9.9: Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with user level access to the CLI to inject root level commands into the component and neighboring Fidelis components. The vulnerability is present in Fidelis Network and Deception