https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-9065.htmlhttps://patchthecve.com/cve/CVE-2025-9065.htmlWed, 17 Jun 2026 10:08:15 +0000HIGH 8.8: A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash.https://patchthecve.com/cve/CVE-2025-3618.htmlhttps://patchthecve.com/cve/CVE-2025-3618.htmlWed, 17 Jun 2026 09:20:18 +0000MEDIUM 5.5: A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocation while processing Type 18 messages. If exploited, a threat actor could cause a denial-of-service on the target software.https://patchthecve.com/cve/CVE-2025-3617.htmlhttps://patchthecve.com/cve/CVE-2025-3617.htmlWed, 17 Jun 2026 09:20:18 +0000HIGH 7.8: A privilege escalation vulnerability exists in the Rockwell Automation ThinManager. When the software starts up, files are deleted in the temporary folder causing the Access Control Entry of the directory to inherit permissions from the parent directory. If exploited, a threat actor could inherit elhttps://patchthecve.com/cve/CVE-2024-10387.htmlhttps://patchthecve.com/cve/CVE-2024-10387.htmlWed, 17 Jun 2026 06:55:32 +0000HIGH 7.5: CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to send crafted messages to the device, potentially resulting in Denial-of-Service.https://patchthecve.com/cve/CVE-2024-10386.htmlhttps://patchthecve.com/cve/CVE-2024-10386.htmlWed, 17 Jun 2026 06:55:32 +0000CRITICAL 9.8: CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to send crafted messages to the device, potentially resulting in database manipulation.https://patchthecve.com/cve/CVE-2024-5990.htmlhttps://patchthecve.com/cve/CVE-2024-5990.htmlWed, 17 Jun 2026 08:17:03 +0000HIGH 7.5: Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.https://patchthecve.com/cve/CVE-2024-5989.htmlhttps://patchthecve.com/cve/CVE-2024-5989.htmlWed, 17 Jun 2026 08:17:03 +0000CRITICAL 9.8: Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.https://patchthecve.com/cve/CVE-2024-5988.htmlhttps://patchthecve.com/cve/CVE-2024-5988.htmlWed, 17 Jun 2026 08:17:02 +0000CRITICAL 9.8: Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.