https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-24623.htmlhttps://patchthecve.com/cve/CVE-2024-24623.htmlWed, 17 Jun 2026 07:14:40 +0000HIGH 8.8: Softaculous Webuzo contains a command injection vulnerability in the FTP management functionality. A remote, authenticated attacker can exploit this vulnerability to gain code execution on the system.https://patchthecve.com/cve/CVE-2024-24622.htmlhttps://patchthecve.com/cve/CVE-2024-24622.htmlWed, 17 Jun 2026 07:14:40 +0000HIGH 8.8: Softaculous Webuzo contains a command injection in the password reset functionality. A remote, authenticated attacker can exploit this vulnerability to gain code execution on the system.https://patchthecve.com/cve/CVE-2024-24621.htmlhttps://patchthecve.com/cve/CVE-2024-24621.htmlWed, 17 Jun 2026 07:14:40 +0000CRITICAL 9.8: Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user.