https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-22919.htmlhttps://patchthecve.com/cve/CVE-2026-22919.htmlWed, 17 Jun 2026 10:20:37 +0000LOW 3.8: An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting (XSS) attacks, leading to the extraction of sensitive data.https://patchthecve.com/cve/CVE-2026-22918.htmlhttps://patchthecve.com/cve/CVE-2026-22918.htmlWed, 17 Jun 2026 10:20:36 +0000MEDIUM 4.3: An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data.https://patchthecve.com/cve/CVE-2026-22917.htmlhttps://patchthecve.com/cve/CVE-2026-22917.htmlWed, 17 Jun 2026 10:20:36 +0000MEDIUM 4.3: Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service.https://patchthecve.com/cve/CVE-2026-22916.htmlhttps://patchthecve.com/cve/CVE-2026-22916.htmlWed, 17 Jun 2026 10:20:36 +0000MEDIUM 4.3: An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration.https://patchthecve.com/cve/CVE-2026-22915.htmlhttps://patchthecve.com/cve/CVE-2026-22915.htmlWed, 17 Jun 2026 10:20:36 +0000MEDIUM 4.3: An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information.https://patchthecve.com/cve/CVE-2026-22914.htmlhttps://patchthecve.com/cve/CVE-2026-22914.htmlWed, 17 Jun 2026 10:20:36 +0000MEDIUM 4.3: An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation.https://patchthecve.com/cve/CVE-2026-22913.htmlhttps://patchthecve.com/cve/CVE-2026-22913.htmlWed, 17 Jun 2026 10:20:36 +0000MEDIUM 4.3: Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead to the extraction of sensitive data.https://patchthecve.com/cve/CVE-2026-22912.htmlhttps://patchthecve.com/cve/CVE-2026-22912.htmlWed, 17 Jun 2026 10:20:36 +0000MEDIUM 4.3: Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication. This can lead to various risk including stealing credentials from unsuspecting users.https://patchthecve.com/cve/CVE-2026-22911.htmlhttps://patchthecve.com/cve/CVE-2026-22911.htmlWed, 17 Jun 2026 10:20:36 +0000MEDIUM 5.3: Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials and gain unauthorized access to the device.https://patchthecve.com/cve/CVE-2026-22910.htmlhttps://patchthecve.com/cve/CVE-2026-22910.htmlWed, 17 Jun 2026 10:20:36 +0000HIGH 7.5: The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access. This represents a high risk to the integrity of the system.https://patchthecve.com/cve/CVE-2026-22909.htmlhttps://patchthecve.com/cve/CVE-2026-22909.htmlWed, 17 Jun 2026 10:20:35 +0000HIGH 7.5: Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations.https://patchthecve.com/cve/CVE-2026-22908.htmlhttps://patchthecve.com/cve/CVE-2026-22908.htmlWed, 17 Jun 2026 10:20:35 +0000CRITICAL 9.1: Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality.https://patchthecve.com/cve/CVE-2026-22907.htmlhttps://patchthecve.com/cve/CVE-2026-22907.htmlWed, 17 Jun 2026 10:20:35 +0000CRITICAL 9.9: An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data.