https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-36624.htmlhttps://patchthecve.com/cve/CVE-2023-36624.htmlWed, 17 Jun 2026 06:06:41 +0000HIGH 7.8: Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the elevated execution of binaries without a password requirement.https://patchthecve.com/cve/CVE-2023-36623.htmlhttps://patchthecve.com/cve/CVE-2023-36623.htmlWed, 17 Jun 2026 06:06:41 +0000HIGH 7.8: The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges.https://patchthecve.com/cve/CVE-2023-36622.htmlhttps://patchthecve.com/cve/CVE-2023-36622.htmlWed, 17 Jun 2026 06:06:41 +0000HIGH 7.2: The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter.