<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: raon k upload</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-7863: A vulnerability in File Transfer Solution of Raonwiz could allow arbitrary command execution as the result of </title><link>https://patchthecve.com/cve/CVE-2020-7863.html</link><guid>https://patchthecve.com/cve/CVE-2020-7863.html</guid><pubDate>Wed, 17 Jun 2026 03:25:34 +0000</pubDate><description>HIGH 8.8: A vulnerability in File Transfer Solution of Raonwiz could allow arbitrary command execution as the result of viewing a specially-crafted web page. This vulnerability is due to insufficient validation of the parameter of the specific method. An attacker could exploit this vulnerability by setting th</description></item><item><title>CVE-2020-7814: RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloa</title><link>https://patchthecve.com/cve/CVE-2020-7814.html</link><guid>https://patchthecve.com/cve/CVE-2020-7814.html</guid><pubDate>Wed, 17 Jun 2026 03:25:29 +0000</pubDate><description>HIGH 7.8: RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloaded and excuted by lack of validation to file extension, witch can used as remote-code-excution attacks by hackers File download &amp; execution vulnerability in ____COMPONENT____ of RAONWIZ RAO</description></item><item><title>CVE-2020-7808: In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update modu</title><link>https://patchthecve.com/cve/CVE-2020-7808.html</link><guid>https://patchthecve.com/cve/CVE-2020-7808.html</guid><pubDate>Wed, 17 Jun 2026 03:25:28 +0000</pubDate><description>HIGH 8.7: In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update module(web.js) allows an attacker to modify arguments which causes downloading a random DLL and injection on it.</description></item></channel></rss>