PatchTheCVEfour-faith vulnerabilities
Recent CVEs affecting four-faith products. 4 tracked.
four-faith has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-09-26. Highest priority: CVE-2024-12856 (score 55/100).
- CVE-2025-11018 MEDIUM 5.3 DOWNGRADE A flaw has been found in Four-Faith Water Conservancy Informatization Platform 1.0
- CVE-2025-10709 MEDIUM 5.3 DOWNGRADE A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform 1.0
- CVE-2025-10708 MEDIUM 5.3 DOWNGRADE A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform 1.0
- CVE-2024-12856 HIGH 7.2 MITIGATE MITIGATE The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulner
FAQ
How do I fix four-faith vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is four-faith being exploited right now?
None of the tracked four-faith CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which four-faith CVE should I patch first?
CVE-2024-12856 currently ranks highest (55/100): The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulner.