https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-6477.htmlhttps://patchthecve.com/cve/CVE-2006-6477.htmlTue, 16 Jun 2026 22:33:12 +0000LOW 2.4: FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack.https://patchthecve.com/cve/CVE-2006-6476.htmlhttps://patchthecve.com/cve/CVE-2006-6476.htmlTue, 16 Jun 2026 22:33:12 +0000LOW 2.4: FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation).https://patchthecve.com/cve/CVE-2006-6475.htmlhttps://patchthecve.com/cve/CVE-2006-6475.htmlTue, 16 Jun 2026 22:33:11 +0000HIGH 7.1: FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception.