https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-22296.htmlhttps://patchthecve.com/cve/CVE-2023-22296.htmlWed, 17 Jun 2026 05:34:58 +0000MEDIUM 6.1: Reflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allows a remote unauthenticated attachttps://patchthecve.com/cve/CVE-2023-22286.htmlhttps://patchthecve.com/cve/CVE-2023-22286.htmlWed, 17 Jun 2026 05:34:57 +0000HIGH 8.1: Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allows a remote unauthenticated attacker to hijack the user auhttps://patchthecve.com/cve/CVE-2023-22280.htmlhttps://patchthecve.com/cve/CVE-2023-22280.htmlWed, 17 Jun 2026 05:34:56 +0000HIGH 7.2: MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command.https://patchthecve.com/cve/CVE-2023-22279.htmlhttps://patchthecve.com/cve/CVE-2023-22279.htmlWed, 17 Jun 2026 05:34:56 +0000CRITICAL 9.8: MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a remote unauthenticated attacker to execute an arbitrary OS command.