https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-36670.htmlhttps://patchthecve.com/cve/CVE-2023-36670.htmlWed, 17 Jun 2026 06:06:48 +0000CRITICAL 9.8: A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4. An attacker can execute arbitrary Linux commands as root by sending crafted TCP requests to the device.https://patchthecve.com/cve/CVE-2023-36669.htmlhttps://patchthecve.com/cve/CVE-2023-36669.htmlWed, 17 Jun 2026 06:06:47 +0000CRITICAL 9.8: Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit (TPU) within the IDU by sending crafthttps://patchthecve.com/cve/CVE-2022-38156.htmlhttps://patchthecve.com/cve/CVE-2022-38156.htmlWed, 17 Jun 2026 04:56:12 +0000HIGH 7.2: A remote command injection issues exists in the web server of the Kratos SpectralNet device with SpectralNet Narrowband (NB) before 1.7.5. As an admin user, an attacker can send a crafted password in order to execute Linux commands as the root user.