https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-53970.htmlhttps://patchthecve.com/cve/CVE-2023-53970.htmlWed, 17 Jun 2026 06:46:27 +0000HIGH 7.5: Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP-bound session identifiers. Attackers can exploit the vulnerable deviceManagement API endpoint to reset device configurations by sending crafted Phttps://patchthecve.com/cve/CVE-2023-53969.htmlhttps://patchthecve.com/cve/CVE-2023-53969.htmlWed, 28 Oct 2026 19:10:00 +0000HIGH 7.5: Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to change user passwords wihttps://patchthecve.com/cve/CVE-2023-53968.htmlhttps://patchthecve.com/cve/CVE-2023-53968.htmlWed, 17 Jun 2026 06:46:26 +0000CRITICAL 9.8: Screen SFT DAB 600/C Firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to remove user accounts withttps://patchthecve.com/cve/CVE-2023-53967.htmlhttps://patchthecve.com/cve/CVE-2023-53967.htmlWed, 17 Jun 2026 06:46:26 +0000HIGH 7.5: Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without requiring the current credentials. Attackers can exploit the userManager.cgx API endpoint by sending a crafted POST request with a new MD5-hashed password tohttps://patchthecve.com/cve/CVE-2023-53776.htmlhttps://patchthecve.com/cve/CVE-2023-53776.htmlWed, 17 Jun 2026 06:46:03 +0000HIGH 8.8: Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers. Attackers can issue unauthorized requests to the device management API by leveraging the session binding mechanism to perform criticahttps://patchthecve.com/cve/CVE-2023-53775.htmlhttps://patchthecve.com/cve/CVE-2023-53775.htmlWed, 17 Jun 2026 06:46:03 +0000MEDIUM 6.5: Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials withohttps://patchthecve.com/cve/CVE-2023-53741.htmlhttps://patchthecve.com/cve/CVE-2023-53741.htmlWed, 17 Jun 2026 06:45:59 +0000HIGH 8.1: Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without prohttps://patchthecve.com/cve/CVE-2023-53740.htmlhttps://patchthecve.com/cve/CVE-2023-53740.htmlWed, 17 Jun 2026 06:45:59 +0000CRITICAL 9.8: Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials. Attackers can exploit the userManager.cgx endpoint by sending a crafted JSON request with a new MD5-hashed password to directly modify thhttps://patchthecve.com/cve/CVE-2025-66263.htmlhttps://patchthecve.com/cve/CVE-2025-66263.htmlMon, 19 Oct 2026 13:10:00 +0000HIGH 7.5: Unauthenticated Arbitrary File Read via Null Byte Injection in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Null byte injection in download_setting.php allows reading arbitrary files. Thhttps://patchthecve.com/cve/CVE-2025-66262.htmlhttps://patchthecve.com/cve/CVE-2025-66262.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Tar extraction with -C / allow arbitrary file overwrite via crafted archive. Thhttps://patchthecve.com/cve/CVE-2025-66261.htmlhttps://patchthecve.com/cve/CVE-2025-66261.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Unauthenticated OS Command Injection (restore_settings.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform URL-decoded name parameter passed to exec() allows remote code execution. The https://patchthecve.com/cve/CVE-2025-66260.htmlhttps://patchthecve.com/cve/CVE-2025-66260.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 6.5: PostgreSQL SQL Injection (status_sql.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in status_sql.php. The `status_sql.php` endpoint constrhttps://patchthecve.com/cve/CVE-2025-66259.htmlhttps://patchthecve.com/cve/CVE-2025-66259.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform in main_ok.php user supplied data/hour/time is passed directly https://patchthecve.com/cve/CVE-2025-66258.htmlhttps://patchthecve.com/cve/CVE-2025-66258.htmlWed, 17 Jun 2026 09:56:34 +0000MEDIUM 5.4: Stored Cross-Site Scripting via XML Injection in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Stored XSS via crafted filenames injected into patchlist.xml. User-controlled filenames are https://patchthecve.com/cve/CVE-2025-66257.htmlhttps://patchthecve.com/cve/CVE-2025-66257.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.1: Unauthenticated Arbitrary File Deletion (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deletepatch parameter allows unauthenticated deletion of arbitrary files.https://patchthecve.com/cve/CVE-2025-66256.htmlhttps://patchthecve.com/cve/CVE-2025-66256.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Unauthenticated Arbitrary File Upload (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Unrestricted file upload in patch_contents.php allows uploading malicious fileshttps://patchthecve.com/cve/CVE-2025-66255.htmlhttps://patchthecve.com/cve/CVE-2025-66255.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Unauthenticated Arbitrary File Upload (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Missing signature validation allows uploading malicious firmware packages.  Thttps://patchthecve.com/cve/CVE-2025-66254.htmlhttps://patchthecve.com/cve/CVE-2025-66254.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.1: Unauthenticated Arbitrary File Deletion (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deleteupgrade parameter allows unauthenticated deletion of arbitrary fihttps://patchthecve.com/cve/CVE-2025-66253.htmlhttps://patchthecve.com/cve/CVE-2025-66253.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Unauthenticated OS Command Injection (start_upgrade.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform User input passed directly to exec() allows remote code execution via start_upgrahttps://patchthecve.com/cve/CVE-2025-66252.htmlhttps://patchthecve.com/cve/CVE-2025-66252.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.5: Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Infinite loop when unlink() fails in status_contents.php causing DoS. Due to the https://patchthecve.com/cve/CVE-2025-66251.htmlhttps://patchthecve.com/cve/CVE-2025-66251.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.1: Unauthenticated Path Traversal with Arbitrary File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deletehidden parameter allows path traversal deletion of arbitrary .tgz fihttps://patchthecve.com/cve/CVE-2025-66250.htmlhttps://patchthecve.com/cve/CVE-2025-66250.htmlSun, 18 Oct 2026 20:10:00 +0000CRITICAL 9.8: Unauthenticated Arbitrary File Upload (status_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Allows unauthenticated arbitrary file upload via /var/tdf/status_contents.php.https://patchthecve.com/cve/CVE-2025-63229.htmlhttps://patchthecve.com/cve/CVE-2025-63229.htmlWed, 17 Jun 2026 09:52:59 +0000MEDIUM 5.4: The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site Scripting (XSS) vulnerability in the /main0.php endpoint. By injecting a malicious JavaScript payload into the ?m= query parameter, an attacker can execute arbitrary code in the victim's brohttps://patchthecve.com/cve/CVE-2025-63228.htmlhttps://patchthecve.com/cve/CVE-2025-63228.htmlWed, 17 Jun 2026 09:52:59 +0000CRITICAL 9.8: The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file (e.g., a PHP webshell) to the server. The uploadehttps://patchthecve.com/cve/CVE-2025-63227.htmlhttps://patchthecve.com/cve/CVE-2025-63227.htmlWed, 17 Jun 2026 09:52:59 +0000HIGH 7.2: The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credentials can upload arbitrary files (e.g., PHP webshells), which are stored in the /patch/ directory. This ahttps://patchthecve.com/cve/CVE-2023-7328.htmlhttps://patchthecve.com/cve/CVE-2023-7328.htmlWed, 17 Jun 2026 06:52:32 +0000MEDIUM 5.3: Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data, including account names and connection metadata such as client IP and timeout values.