https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-26390.htmlhttps://patchthecve.com/cve/CVE-2025-26390.htmlWed, 17 Jun 2026 09:01:41 +0000CRITICAL 9.8: A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Adminihttps://patchthecve.com/cve/CVE-2025-26389.htmlhttps://patchthecve.com/cve/CVE-2025-26389.htmlWed, 17 Jun 2026 09:01:41 +0000CRITICAL 10.0: A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0). The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code whttps://patchthecve.com/cve/CVE-2024-36140.htmlhttps://patchthecve.com/cve/CVE-2024-36140.htmlWed, 17 Jun 2026 07:36:10 +0000MEDIUM 6.8: A vulnerability has been identified in OZW672 (All versions < V5.2), OZW772 (All versions < V5.2). The user accounts tab of affected devices is vulnerable to stored cross-site scripting (XSS) attacks. This could allow an authenticated remote attacker to inject arbitrary JavaScript code that is la