https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-8378.htmlhttps://patchthecve.com/cve/CVE-2016-8378.htmlWed, 17 Jun 2026 00:54:14 +0000CRITICAL 9.8: An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application's database lacks sufficient safeguards for protecting credentials.https://patchthecve.com/cve/CVE-2016-8369.htmlhttps://patchthecve.com/cve/CVE-2016-8369.htmlWed, 17 Jun 2026 00:54:14 +0000HIGH 8.8: An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request (CROSS-SITE REQUEST FORGERY).https://patchthecve.com/cve/CVE-2016-8361.htmlhttps://patchthecve.com/cve/CVE-2016-8361.htmlWed, 17 Jun 2026 00:54:13 +0000HIGH 8.6: An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application uses a hard-coded username with no password allowing an attacker into the system without authentication.https://patchthecve.com/cve/CVE-2016-8357.htmlhttps://patchthecve.com/cve/CVE-2016-8357.htmlWed, 17 Jun 2026 00:54:12 +0000HIGH 7.1: An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands. This would allow an attacker with read-only access to make changes within the application.