PatchTheCVE: nascenthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-38613: The assets/index.php Image Upload feature of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to uplhttps://patchthecve.com/cve/CVE-2021-38613.htmlhttps://patchthecve.com/cve/CVE-2021-38613.htmlWed, 17 Jun 2026 04:02:26 +0000CRITICAL 9.8: The assets/index.php Image Upload feature of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to upload any code to the target system and achieve remote code execution.CVE-2021-38612: In NASCENT RemKon Device Manager 4.0.0.0, a Directory Traversal vulnerability in a log-reading function in maihttps://patchthecve.com/cve/CVE-2021-38612.htmlhttps://patchthecve.com/cve/CVE-2021-38612.htmlWed, 17 Jun 2026 04:02:26 +0000HIGH 7.5: In NASCENT RemKon Device Manager 4.0.0.0, a Directory Traversal vulnerability in a log-reading function in maintenance/readLog.php allows an attacker to read any file via a specialized URL.CVE-2021-38611: A command-injection vulnerability in the Image Upload function of the NASCENT RemKon Device Manager 4.0.0.0 alhttps://patchthecve.com/cve/CVE-2021-38611.htmlhttps://patchthecve.com/cve/CVE-2021-38611.htmlWed, 17 Jun 2026 04:02:26 +0000CRITICAL 9.8: A command-injection vulnerability in the Image Upload function of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to execute arbitrary commands, as root, via shell metacharacters in the filename parameter to assets/index.php.