PatchTheCVE: ruckus smartzone firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-44962: RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.https://patchthecve.com/cve/CVE-2025-44962.htmlhttps://patchthecve.com/cve/CVE-2025-44962.htmlWed, 17 Jun 2026 09:25:19 +0000MEDIUM 5.0: RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.CVE-2025-44961: In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field https://patchthecve.com/cve/CVE-2025-44961.htmlhttps://patchthecve.com/cve/CVE-2025-44961.htmlWed, 17 Jun 2026 09:25:18 +0000CRITICAL 9.9: In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.CVE-2025-44960: RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an Ahttps://patchthecve.com/cve/CVE-2025-44960.htmlhttps://patchthecve.com/cve/CVE-2025-44960.htmlWed, 17 Jun 2026 09:25:18 +0000HIGH 8.5: RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.CVE-2025-44957: Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and craftehttps://patchthecve.com/cve/CVE-2025-44957.htmlhttps://patchthecve.com/cve/CVE-2025-44957.htmlWed, 17 Jun 2026 09:25:18 +0000HIGH 8.5: Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.CVE-2025-44954: RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user https://patchthecve.com/cve/CVE-2025-44954.htmlhttps://patchthecve.com/cve/CVE-2025-44954.htmlWed, 17 Jun 2026 09:25:18 +0000CRITICAL 9.0: RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.