https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-34335.htmlhttps://patchthecve.com/cve/CVE-2025-34335.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 8.8: AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an authenticated command injection vulnerability in the license activation workflow handled by AudioCodes_files/ActivateLicense.php. When a license file is uploaded, the application derives a new filenhttps://patchthecve.com/cve/CVE-2025-34334.htmlhttps://patchthecve.com/cve/CVE-2025-34334.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 8.8: AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 are vulnerable to an authenticated command injection in the fax test functionality implemented by AudioCodes_files/TestFax.php. When a fax "send" test is requested, the application builds a faxsender command https://patchthecve.com/cve/CVE-2025-34333.htmlhttps://patchthecve.com/cve/CVE-2025-34333.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.8: AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 configure the web document root at C:\\F2MAdmin\\F2E with overly permissive file system permissions. Authenticated local users have modify rights on this directory, while the associated web server process runhttps://patchthecve.com/cve/CVE-2025-34332.htmlhttps://patchthecve.com/cve/CVE-2025-34332.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.8: AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component that controls back-end Windows services using helper batch scripts located under C:\\F2MAdmin\\F2E\\AudioCodes_files\\utils\\Services. When certain service actions are rhttps://patchthecve.com/cve/CVE-2025-34331.htmlhttps://patchthecve.com/cve/CVE-2025-34331.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.5: AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 contain an unauthenticated file read vulnerability via the download.php script. The endpoint exposes a file download mechanism that lacks access control, allowing remote, unauthenticated users to request filehttps://patchthecve.com/cve/CVE-2025-34330.htmlhttps://patchthecve.com/cve/CVE-2025-34330.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 5.3: AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that exposes an unauthenticated prompt upload endpoint at AudioCodes_files/utils/IVR/diagram/ajaxPromptUploadFile.php. The script accepts an uploaded file andhttps://patchthecve.com/cve/CVE-2025-34329.htmlhttps://patchthecve.com/cve/CVE-2025-34329.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthenticated backup upload endpoint at AudioCodes_files/ajaxBackupUploadFile.php in the F2MAdmin web interface. The script derives a backup folder path from application configuration, creates thehttps://patchthecve.com/cve/CVE-2025-34328.htmlhttps://patchthecve.com/cve/CVE-2025-34328.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that exposes an unauthenticated script-management endpoint at AudioCodes_files/utils/IVR/diagram/ajaxScript.php. The saveScript action writes attacker-suppliehttps://patchthecve.com/cve/CVE-2025-32106.htmlhttps://patchthecve.com/cve/CVE-2025-32106.htmlWed, 17 Jun 2026 09:11:27 +0000CRITICAL 9.8: In Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may result in an unauthenticated remote user's ability to execute unauthorized code.https://patchthecve.com/cve/CVE-2024-52884.htmlhttps://patchthecve.com/cve/CVE-2024-52884.htmlWed, 17 Jun 2026 08:07:48 +0000HIGH 7.5: An issue was discovered in AudioCodes Mediant Session Border Controller (SBC) before 7.40A.501.841. Due to the use of weak password obfuscation/encryption, an attacker with access to configuration exports (INI) is able to decrypt the passwords.https://patchthecve.com/cve/CVE-2024-52883.htmlhttps://patchthecve.com/cve/CVE-2024-52883.htmlWed, 17 Jun 2026 08:07:48 +0000HIGH 7.5: An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to a path traversal vulnerability, sensitive data can be read without any authentication.https://patchthecve.com/cve/CVE-2024-52882.htmlhttps://patchthecve.com/cve/CVE-2024-52882.htmlWed, 17 Jun 2026 08:07:48 +0000MEDIUM 6.1: An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to improper neutralization of input via the devices API, an attacker can inject malicious JavaScript code (XSS) to attack logged-in administrator sessions.https://patchthecve.com/cve/CVE-2024-52881.htmlhttps://patchthecve.com/cve/CVE-2024-52881.htmlWed, 17 Jun 2026 08:07:47 +0000HIGH 7.5: An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to the use of a hard-coded key, an attacker is able to decrypt sensitive data such as passwords extracted from the topology file.