https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-3936.htmlhttps://patchthecve.com/cve/CVE-2020-3936.htmlWed, 17 Jun 2026 03:19:17 +0000CRITICAL 10.0: UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.https://patchthecve.com/cve/CVE-2020-3921.htmlhttps://patchthecve.com/cve/CVE-2020-3921.htmlWed, 17 Jun 2026 03:19:15 +0000HIGH 8.6: UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page.https://patchthecve.com/cve/CVE-2020-3920.htmlhttps://patchthecve.com/cve/CVE-2020-3920.htmlWed, 17 Jun 2026 03:19:15 +0000HIGH 8.1: UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through specific system directory.