https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-20051.htmlhttps://patchthecve.com/cve/CVE-2018-20051.htmlWed, 17 Jun 2026 01:52:13 +0000HIGH 7.5: Mishandling of '>' on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote attackers to cause a denial of service (crash and reboot) via certain ONVIF methods such as CreateUsers, SetImagingSettings, GetStreamUri, and so on.https://patchthecve.com/cve/CVE-2018-20050.htmlhttps://patchthecve.com/cve/CVE-2018-20050.htmlWed, 17 Jun 2026 01:52:12 +0000HIGH 7.5: Mishandling of an empty string on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote attackers to cause a denial of service (crash and reboot) via the ONVIF GetStreamUri method and GetVideoEncoderConfigurationOptions method.https://patchthecve.com/cve/CVE-2017-16566.htmlhttps://patchthecve.com/cve/CVE-2017-16566.htmlWed, 17 Jun 2026 01:09:29 +0000CRITICAL 9.8: On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system files including those used for authentication (such as passwd and shadow). This can be abused to take full root level control of the device.