https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-35582.htmlhttps://patchthecve.com/cve/CVE-2022-35582.htmlWed, 17 Jun 2026 04:51:57 +0000HIGH 8.8: Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control. The operating system that WAPPLES runs on has a built-in non-privileged user penta with a predefined password. The password for this user, as well as its existence, is not disclosed in the documenhttps://patchthecve.com/cve/CVE-2022-35413.htmlhttps://patchthecve.com/cve/CVE-2022-35413.htmlWed, 17 Jun 2026 04:51:47 +0000CRITICAL 9.8: WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information (such as SSL keys) via an HTTPS request to the /webapi/ URI on port 443 or 5001.https://patchthecve.com/cve/CVE-2022-31324.htmlhttps://patchthecve.com/cve/CVE-2022-31324.htmlWed, 17 Jun 2026 04:45:18 +0000MEDIUM 6.5: An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request.https://patchthecve.com/cve/CVE-2022-31322.htmlhttps://patchthecve.com/cve/CVE-2022-31322.htmlWed, 17 Jun 2026 04:45:18 +0000HIGH 7.8: Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged executables.