https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-38599.htmlhttps://patchthecve.com/cve/CVE-2022-38599.htmlThu, 09 Jul 2026 01:17:41 +0000MEDIUM 6.5: Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface.https://patchthecve.com/cve/CVE-2022-36633.htmlhttps://patchthecve.com/cve/CVE-2022-36633.htmlWed, 17 Jun 2026 04:53:46 +0000HIGH 8.8: Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a user in a social engihttps://patchthecve.com/cve/CVE-2018-19555.htmlhttps://patchthecve.com/cve/CVE-2018-19555.htmlWed, 17 Jun 2026 01:49:29 +0000HIGH 8.8: tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password.https://patchthecve.com/cve/CVE-2018-19301.htmlhttps://patchthecve.com/cve/CVE-2018-19301.htmlWed, 17 Jun 2026 01:49:05 +0000MEDIUM 6.1: tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log.