PatchTheCVE: nukeviethttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-8772: A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06https://patchthecve.com/cve/CVE-2025-8772.htmlhttps://patchthecve.com/cve/CVE-2025-8772.htmlWed, 17 Jun 2026 10:07:35 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06. This issue affects some unknown processing of the file /admin/index.php?language=en&nv=upload of the component Module Handler. The manipulation leads to server-side request forgery. The attack may CVE-2024-36531: nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution viahttps://patchthecve.com/cve/CVE-2024-36531.htmlhttps://patchthecve.com/cve/CVE-2024-36531.htmlWed, 17 Jun 2026 07:36:54 +0000MEDIUM 5.7: nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component.CVE-2024-36528: nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which reshttps://patchthecve.com/cve/CVE-2024-36528.htmlhttps://patchthecve.com/cve/CVE-2024-36528.htmlWed, 17 Jun 2026 07:36:54 +0000HIGH 8.8: nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and /admin/extensions/upload.php.