https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-50695.htmlhttps://patchthecve.com/cve/CVE-2022-50695.htmlWed, 17 Jun 2026 05:24:01 +0000HIGH 7.5: SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x contains a network vulnerability that allows unauthenticated attackers to send ICMP signals to arbitrary hosts through network command scripts. Attackers can abuse ping.php, traceroute.php, and dns.php to generate network flooding attacks targeting externalhttps://patchthecve.com/cve/CVE-2022-50692.htmlhttps://patchthecve.com/cve/CVE-2022-50692.htmlWed, 17 Jun 2026 05:24:00 +0000HIGH 7.5: SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sessions and gain unauthorized access to the applicatihttps://patchthecve.com/cve/CVE-2023-53962.htmlhttps://patchthecve.com/cve/CVE-2023-53962.htmlWed, 17 Jun 2026 06:46:26 +0000HIGH 7.5: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated directory traversal vulnerability that allows remote attackers to write arbitrary files through the 'upgfile' parameter in upload.cgi. Attackers can exploit the vulnerability by sending crafted multipart form-data POST requests with direhttps://patchthecve.com/cve/CVE-2023-53955.htmlhttps://patchthecve.com/cve/CVE-2023-53955.htmlWed, 17 Jun 2026 06:46:25 +0000CRITICAL 9.8: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the vulnerability by manipulating user-supplied input to execute privileged functionalities without pr