https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-3342.htmlhttps://patchthecve.com/cve/CVE-2021-3342.htmlWed, 17 Jun 2026 04:04:58 +0000CRITICAL 9.8: EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI.https://patchthecve.com/cve/CVE-2021-26704.htmlhttps://patchthecve.com/cve/CVE-2021-26704.htmlWed, 17 Jun 2026 03:43:41 +0000HIGH 8.8: EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI.https://patchthecve.com/cve/CVE-2021-26703.htmlhttps://patchthecve.com/cve/CVE-2021-26703.htmlWed, 17 Jun 2026 03:43:41 +0000CRITICAL 9.8: EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI.https://patchthecve.com/cve/CVE-2021-26702.htmlhttps://patchthecve.com/cve/CVE-2021-26702.htmlWed, 17 Jun 2026 03:43:41 +0000MEDIUM 6.1: EPrints 3.4.2 exposes a reflected XSS opportunity in the dataset parameter to the cgi/dataset_dictionary URI.https://patchthecve.com/cve/CVE-2021-26476.htmlhttps://patchthecve.com/cve/CVE-2021-26476.htmlWed, 17 Jun 2026 03:43:26 +0000CRITICAL 9.8: EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI.https://patchthecve.com/cve/CVE-2021-26475.htmlhttps://patchthecve.com/cve/CVE-2021-26475.htmlWed, 17 Jun 2026 03:43:26 +0000MEDIUM 6.1: EPrints 3.4.2 exposes a reflected XSS opportunity in the via a cgi/cal URI.