PatchTheCVE: boodskaphttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-35136: Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.https://patchthecve.com/cve/CVE-2022-35136.htmlhttps://patchthecve.com/cve/CVE-2022-35136.htmlWed, 17 Jun 2026 04:51:29 +0000MEDIUM 6.5: Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.CVE-2022-35135: Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/usehttps://patchthecve.com/cve/CVE-2022-35135.htmlhttps://patchthecve.com/cve/CVE-2022-35135.htmlWed, 17 Jun 2026 04:51:29 +0000HIGH 8.8: Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/<uuid>.CVE-2022-35134: Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability.https://patchthecve.com/cve/CVE-2022-35134.htmlhttps://patchthecve.com/cve/CVE-2022-35134.htmlWed, 17 Jun 2026 04:51:29 +0000MEDIUM 5.4: Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability.