PatchTheCVE: avtechhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-57202: A stored cross-site scripting (XSS) vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGhttps://patchthecve.com/cve/CVE-2025-57202.htmlhttps://patchthecve.com/cve/CVE-2025-57202.htmlSun, 05 Jul 2026 17:17:18 +0000MEDIUM 6.1: A stored cross-site scripting (XSS) vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field.CVE-2025-57201: AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated comhttps://patchthecve.com/cve/CVE-2025-57201.htmlhttps://patchthecve.com/cve/CVE-2025-57201.htmlSun, 05 Jul 2026 17:17:18 +0000HIGH 8.8: AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input.CVE-2025-57199: AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated comhttps://patchthecve.com/cve/CVE-2025-57199.htmlhttps://patchthecve.com/cve/CVE-2025-57199.htmlSun, 05 Jul 2026 17:17:18 +0000HIGH 8.8: AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input.CVE-2025-57198: AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated comhttps://patchthecve.com/cve/CVE-2025-57198.htmlhttps://patchthecve.com/cve/CVE-2025-57198.htmlSun, 05 Jul 2026 17:17:17 +0000HIGH 8.8: AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input.CVE-2025-57200: AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated comhttps://patchthecve.com/cve/CVE-2025-57200.htmlhttps://patchthecve.com/cve/CVE-2025-57200.htmlSun, 05 Jul 2026 17:17:18 +0000MEDIUM 6.5: AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the test_mail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input.CVE-2025-50944: An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH https://patchthecve.com/cve/CVE-2025-50944.htmlhttps://patchthecve.com/cve/CVE-2025-50944.htmlWed, 17 Jun 2026 09:35:26 +0000HIGH 8.8: An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager used in checkServerTrusted only checks the certificate's expiration date, skipping proper TLS chain validation.CVE-2025-46408: An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.cohttps://patchthecve.com/cve/CVE-2025-46408.htmlhttps://patchthecve.com/cve/CVE-2025-46408.htmlWed, 17 Jun 2026 09:26:21 +0000CRITICAL 9.8: An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOW_ALL_HOSTNAME_VERIFIER, bypassing domain validation.CVE-2024-7029: Commands can be injected over the network and executed without authentication.https://patchthecve.com/cve/CVE-2024-7029.htmlhttps://patchthecve.com/cve/CVE-2024-7029.htmlWed, 17 Jun 2026 08:19:13 +0000HIGH 8.8: Commands can be injected over the network and executed without authentication.