https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-19643.htmlhttps://patchthecve.com/cve/CVE-2020-19643.htmlWed, 17 Jun 2026 02:59:52 +0000MEDIUM 6.1: Cross Site Scripting (XSS) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page.https://patchthecve.com/cve/CVE-2020-19642.htmlhttps://patchthecve.com/cve/CVE-2020-19642.htmlWed, 17 Jun 2026 02:59:52 +0000MEDIUM 6.2: An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card.https://patchthecve.com/cve/CVE-2020-19641.htmlhttps://patchthecve.com/cve/CVE-2020-19641.htmlWed, 17 Jun 2026 02:59:52 +0000HIGH 8.8: An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the "Operator" Privilege can gain admin privileges via a crafted request to '/goform/formUserMng'.https://patchthecve.com/cve/CVE-2020-19640.htmlhttps://patchthecve.com/cve/CVE-2020-19640.htmlWed, 17 Jun 2026 02:59:51 +0000HIGH 7.5: An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can reboot the device causing a Denial of Service, via a hidden reboot command to '/media/?action=cmd'.https://patchthecve.com/cve/CVE-2020-19639.htmlhttps://patchthecve.com/cve/CVE-2020-19639.htmlWed, 17 Jun 2026 02:59:51 +0000HIGH 8.8: Cross Site Request Forgery (CSRF) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI.