https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3572.htmlhttps://patchthecve.com/cve/CVE-2025-3572.htmlWed, 17 Jun 2026 09:20:13 +0000HIGH 7.5: SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server.https://patchthecve.com/cve/CVE-2024-12652.htmlhttps://patchthecve.com/cve/CVE-2024-12652.htmlWed, 17 Jun 2026 07:00:12 +0000HIGH 8.8: A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code.https://patchthecve.com/cve/CVE-2024-8776.htmlhttps://patchthecve.com/cve/CVE-2024-8776.htmlWed, 17 Jun 2026 08:23:16 +0000MEDIUM 6.1: SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting attacks.