https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-44469.htmlhttps://patchthecve.com/cve/CVE-2026-44469.htmlFri, 24 Jul 2026 11:10:00 +0000HIGH 7.8: The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileged local attacker can exploit a TOCTOU race condition with a practical time window to replace verified files with malicious ones before instahttps://patchthecve.com/cve/CVE-2026-44468.htmlhttps://patchthecve.com/cve/CVE-2026-44468.htmlFri, 24 Jul 2026 11:10:00 +0000HIGH 7.8: The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to modify a temporary file defining the components to be installed, enabling local privilege escalation by forcing the deployment of arbitrary cohttps://patchthecve.com/cve/CVE-2026-0393.htmlhttps://patchthecve.com/cve/CVE-2026-0393.htmlThu, 23 Jul 2026 16:10:00 +0000MEDIUM 6.5: The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerability affects only login operations within an active visualization session.