https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3750.htmlhttps://patchthecve.com/cve/CVE-2026-3750.htmlWed, 17 Jun 2026 10:44:08 +0000MEDIUM 4.7: A security vulnerability has been detected in ContiNew Admin up to 4.2.0. This issue affects the function URI.create of the file continew-system/src/main/java/top/continew/admin/system/factory/S3ClientFactory.java of the component Storage Management Module. The manipulation leads to server-side requhttps://patchthecve.com/cve/CVE-2025-4552.htmlhttps://patchthecve.com/cve/CVE-2025-4552.htmlWed, 17 Jun 2026 09:33:30 +0000MEDIUM 5.4: A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/system/user/1/password. The manipulation leads to unverified password change. The attack can be launched remotely. The exploit hhttps://patchthecve.com/cve/CVE-2025-4551.htmlhttps://patchthecve.com/cve/CVE-2025-4551.htmlWed, 17 Jun 2026 09:33:30 +0000LOW 3.5: A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /dev-api/common/file. The manipulation of the argument File leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been dishttps://patchthecve.com/cve/CVE-2024-8155.htmlhttps://patchthecve.com/cve/CVE-2024-8155.htmlWed, 17 Jun 2026 08:22:00 +0000MEDIUM 4.7: A vulnerability classified as critical was found in ContiNew Admin 3.2.0. Affected by this vulnerability is the function top.continew.starter.extension.crud.controller.BaseController#tree of the file /api/system/dept/tree?sort=parentId%2Casc&sort=sort%2Casc. The manipulation of the argument sort leahttps://patchthecve.com/cve/CVE-2024-8150.htmlhttps://patchthecve.com/cve/CVE-2024-8150.htmlWed, 17 Jun 2026 08:22:00 +0000MEDIUM 4.7: A vulnerability was found in ContiNew Admin 3.2.0 and classified as critical. Affected by this issue is the function top.continew.starter.extension.crud.controller.BaseController#page of the file /api/system/user?deptId=1&page=1&size=10. The manipulation of the argument sort leads to sql injection.