https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-44796.htmlhttps://patchthecve.com/cve/CVE-2022-44796.htmlWed, 17 Jun 2026 05:08:56 +0000CRITICAL 9.8: An issue was discovered in Object First Ootbi BETA build 1.0.7.712. The authorization service has a flow that allows getting access to the Web UI without knowing credentials. For signing, the JWT token uses a secret key that is generated through a function that doesn't produce cryptographically strohttps://patchthecve.com/cve/CVE-2022-44795.htmlhttps://patchthecve.com/cve/CVE-2022-44795.htmlWed, 17 Jun 2026 05:08:56 +0000MEDIUM 6.5: An issue was discovered in Object First Ootbi BETA build 1.0.7.712. A flaw was found in the Web Service, which could lead to local information disclosure. The command that creates the URL for the support bundle uses an insecure RNG. That can lead to prediction of the generated URL. As a result, an ahttps://patchthecve.com/cve/CVE-2022-44794.htmlhttps://patchthecve.com/cve/CVE-2022-44794.htmlWed, 17 Jun 2026 05:08:56 +0000HIGH 8.8: An issue was discovered in Object First Ootbi BETA build 1.0.7.712. Management protocol has a flow which allows a remote attacker to execute arbitrary Bash code with root privileges. The command that sets the hostname doesn't validate input parameters. As a result, arbitrary data goes directly to th