https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-63223.htmlhttps://patchthecve.com/cve/CVE-2025-63223.htmlWed, 17 Jun 2026 09:52:58 +0000CRITICAL 9.8: The Axel Technology StreamerMAX MK II devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and mohttps://patchthecve.com/cve/CVE-2025-63221.htmlhttps://patchthecve.com/cve/CVE-2025-63221.htmlWed, 17 Jun 2026 09:52:58 +0000CRITICAL 9.1: The Axel Technology puma devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system shttps://patchthecve.com/cve/CVE-2025-63218.htmlhttps://patchthecve.com/cve/CVE-2025-63218.htmlWed, 17 Jun 2026 09:52:57 +0000CRITICAL 9.8: The Axel Technology WOLF1MS and WOLF2MS devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and