PatchTheCVE: plextrachttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-12687: Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection ahttps://patchthecve.com/cve/CVE-2024-12687.htmlhttps://patchthecve.com/cve/CVE-2024-12687.htmlWed, 17 Jun 2026 07:00:16 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes. This issue affects PlexTrac: from 1.61.3 before 2.8.1.CVE-2024-11839: Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection ahttps://patchthecve.com/cve/CVE-2024-11839.htmlhttps://patchthecve.com/cve/CVE-2024-11839.htmlWed, 17 Jun 2026 06:58:33 +0000HIGH 7.5: Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1.CVE-2024-11838: External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an https://patchthecve.com/cve/CVE-2024-11838.htmlhttps://patchthecve.com/cve/CVE-2024-11838.htmlWed, 17 Jun 2026 06:58:33 +0000CRITICAL 9.8: External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 before 2.8.1.CVE-2024-11837: Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrhttps://patchthecve.com/cve/CVE-2024-11837.htmlhttps://patchthecve.com/cve/CVE-2024-11837.htmlWed, 17 Jun 2026 06:58:33 +0000CRITICAL 9.8: Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac  allows N1QL Injection.This issue affects PlexTrac: from 1.61.3 before 2.8.1.CVE-2024-11836: Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.Thhttps://patchthecve.com/cve/CVE-2024-11836.htmlhttps://patchthecve.com/cve/CVE-2024-11836.htmlWed, 17 Jun 2026 06:58:33 +0000HIGH 7.5: Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.This issue affects PlexTrac: from 1.61.3 before 2.8.1.CVE-2024-11835: Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac: https://patchthecve.com/cve/CVE-2024-11835.htmlhttps://patchthecve.com/cve/CVE-2024-11835.htmlWed, 17 Jun 2026 06:58:33 +0000HIGH 7.5: Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac: from 1.61.3 before 2.8.1.CVE-2024-11834: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allowhttps://patchthecve.com/cve/CVE-2024-11834.htmlhttps://patchthecve.com/cve/CVE-2024-11834.htmlWed, 17 Jun 2026 06:58:32 +0000CRITICAL 9.1: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1.CVE-2024-11833: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allowhttps://patchthecve.com/cve/CVE-2024-11833.htmlhttps://patchthecve.com/cve/CVE-2024-11833.htmlWed, 17 Jun 2026 06:58:32 +0000CRITICAL 9.1: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1.