https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-24030.htmlhttps://patchthecve.com/cve/CVE-2020-24030.htmlWed, 17 Jun 2026 03:05:10 +0000CRITICAL 9.8: ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable in the current implementation. Tokens are properly expired, https://patchthecve.com/cve/CVE-2020-24029.htmlhttps://patchthecve.com/cve/CVE-2020-24029.htmlWed, 17 Jun 2026 03:05:10 +0000CRITICAL 9.8: Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated agahttps://patchthecve.com/cve/CVE-2020-24028.htmlhttps://patchthecve.com/cve/CVE-2020-24028.htmlWed, 17 Jun 2026 03:05:10 +0000HIGH 8.8: ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced serv