<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: infocus</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2017-14972: InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Contr</title><link>https://patchthecve.com/cve/CVE-2017-14972.html</link><guid>https://patchthecve.com/cve/CVE-2017-14972.html</guid><pubDate>Wed, 17 Jun 2026 01:07:04 +0000</pubDate><description>HIGH 7.5: InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file.</description></item><item><title>CVE-2014-8384: The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which a</title><link>https://patchthecve.com/cve/CVE-2014-8384.html</link><guid>https://patchthecve.com/cve/CVE-2014-8384.html</guid><pubDate>Wed, 17 Jun 2026 00:16:39 +0000</pubDate><description>HIGH 9.4: The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request.</description></item><item><title>CVE-2014-8383: The InFocus IN3128HD projector with firmware 0.26 allows remote attackers to bypass authentication via a direc</title><link>https://patchthecve.com/cve/CVE-2014-8383.html</link><guid>https://patchthecve.com/cve/CVE-2014-8383.html</guid><pubDate>Wed, 17 Jun 2026 00:16:39 +0000</pubDate><description>HIGH 10.0: The InFocus IN3128HD projector with firmware 0.26 allows remote attackers to bypass authentication via a direct request to main.html.</description></item></channel></rss>