https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-8792.htmlhttps://patchthecve.com/cve/CVE-2020-8792.htmlWed, 17 Jun 2026 03:26:57 +0000MEDIUM 5.3: The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has an information-exposure issue. In the mobile app, an attempt to add an already-bound lock by its barcode reveals the email address of the account to which the lock is bound, as well as the name of the lock. Validhttps://patchthecve.com/cve/CVE-2020-8791.htmlhttps://patchthecve.com/cve/CVE-2020-8791.htmlWed, 17 Jun 2026 03:26:56 +0000MEDIUM 6.5: The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) allows remote attackers to submit API requests using authenticated but unauthorized tokens, resulting in IDOR issues. A remote attacker can use their own token to make unauthorized API requests on behalf of arbitraryhttps://patchthecve.com/cve/CVE-2020-8790.htmlhttps://patchthecve.com/cve/CVE-2020-8790.htmlWed, 17 Jun 2026 03:26:56 +0000CRITICAL 9.8: The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak password requirements combined with improper restriction of excessive authentication attempts, which could allow a remote attacker to discover user credentials and obtain access via a brute force attack.https://patchthecve.com/cve/CVE-2020-10876.htmlhttps://patchthecve.com/cve/CVE-2020-10876.htmlWed, 17 Jun 2026 02:48:36 +0000HIGH 7.5: The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) does not correctly implement its timeout on the four-digit verification code that is required for resetting passwords, nor does it properly restrict excessive verification attempts. This allows an attacker to brute f