PatchTheCVE: ruckus network directorhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-44963: RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the https://patchthecve.com/cve/CVE-2025-44963.htmlhttps://patchthecve.com/cve/CVE-2025-44963.htmlWed, 17 Jun 2026 09:25:19 +0000CRITICAL 9.0: RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.CVE-2025-44962: RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.https://patchthecve.com/cve/CVE-2025-44962.htmlhttps://patchthecve.com/cve/CVE-2025-44962.htmlWed, 17 Jun 2026 09:25:19 +0000MEDIUM 5.0: RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.CVE-2025-44961: In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field https://patchthecve.com/cve/CVE-2025-44961.htmlhttps://patchthecve.com/cve/CVE-2025-44961.htmlWed, 17 Jun 2026 09:25:18 +0000CRITICAL 9.9: In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.CVE-2025-44960: RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an Ahttps://patchthecve.com/cve/CVE-2025-44960.htmlhttps://patchthecve.com/cve/CVE-2025-44960.htmlWed, 17 Jun 2026 09:25:18 +0000HIGH 8.5: RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.CVE-2025-44958: RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.https://patchthecve.com/cve/CVE-2025-44958.htmlhttps://patchthecve.com/cve/CVE-2025-44958.htmlWed, 17 Jun 2026 09:25:18 +0000MEDIUM 5.3: RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.CVE-2025-44957: Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and craftehttps://patchthecve.com/cve/CVE-2025-44957.htmlhttps://patchthecve.com/cve/CVE-2025-44957.htmlWed, 17 Jun 2026 09:25:18 +0000HIGH 8.5: Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.CVE-2025-44955: RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded passwhttps://patchthecve.com/cve/CVE-2025-44955.htmlhttps://patchthecve.com/cve/CVE-2025-44955.htmlWed, 17 Jun 2026 09:25:18 +0000HIGH 8.8: RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.