https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3422.htmlhttps://patchthecve.com/cve/CVE-2026-3422.htmlWed, 17 Jun 2026 10:43:34 +0000CRITICAL 9.8: U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized content.https://patchthecve.com/cve/CVE-2025-12865.htmlhttps://patchthecve.com/cve/CVE-2025-12865.htmlWed, 07 Oct 2026 21:10:00 +0000HIGH 8.8: U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.https://patchthecve.com/cve/CVE-2025-12864.htmlhttps://patchthecve.com/cve/CVE-2025-12864.htmlWed, 07 Oct 2026 21:10:00 +0000HIGH 8.8: U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.https://patchthecve.com/cve/CVE-2025-2396.htmlhttps://patchthecve.com/cve/CVE-2025-2396.htmlWed, 17 Jun 2026 09:06:56 +0000HIGH 8.8: The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.https://patchthecve.com/cve/CVE-2025-2395.htmlhttps://patchthecve.com/cve/CVE-2025-2395.htmlWed, 17 Jun 2026 09:06:56 +0000CRITICAL 9.8: The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator.