https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-5881.htmlhttps://patchthecve.com/cve/CVE-2023-5881.htmlWed, 17 Jun 2026 06:49:35 +0000HIGH 8.2: Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Garage Door Control Module Setup" and modify the Garage door's SSID settings. https://patchthecve.com/cve/CVE-2023-5880.htmlhttps://patchthecve.com/cve/CVE-2023-5880.htmlWed, 17 Jun 2026 06:49:34 +0000HIGH 8.8: When the Genie Company Aladdin Connect garage door opener (Retrofit-Kit Model ALDCM) is placed into configuration mode the web servers “Garage Door Control Module Setup” page is vulnerable to XSS via a broadcast SSID name containing malicious code with client side Java Script and/or HTML. This allowhttps://patchthecve.com/cve/CVE-2023-5879.htmlhttps://patchthecve.com/cve/CVE-2023-5879.htmlWed, 17 Jun 2026 06:49:34 +0000MEDIUM 6.8: Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 (and below) on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication cr