https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-5560.htmlhttps://patchthecve.com/cve/CVE-2018-5560.htmlWed, 17 Jun 2026 02:00:31 +0000CRITICAL 10.0: A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Guardzilla device.https://patchthecve.com/cve/CVE-2018-18602.htmlhttps://patchthecve.com/cve/CVE-2018-18602.htmlWed, 17 Jun 2026 01:47:34 +0000CRITICAL 9.8: The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring.https://patchthecve.com/cve/CVE-2018-18601.htmlhttps://patchthecve.com/cve/CVE-2018-18601.htmlWed, 17 Jun 2026 01:47:34 +0000HIGH 8.1: The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buffer Overflow.https://patchthecve.com/cve/CVE-2018-18600.htmlhttps://patchthecve.com/cve/CVE-2018-18600.htmlWed, 17 Jun 2026 01:47:34 +0000HIGH 8.1: The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.