PatchTheCVE: racomhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-20075: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via configd.https://patchthecve.com/cve/CVE-2021-20075.htmlhttps://patchthecve.com/cve/CVE-2021-20075.htmlWed, 17 Jun 2026 03:33:14 +0000HIGH 7.8: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via configd.CVE-2021-20074: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line intehttps://patchthecve.com/cve/CVE-2021-20074.htmlhttps://patchthecve.com/cve/CVE-2021-20074.htmlWed, 17 Jun 2026 03:33:13 +0000HIGH 8.8: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands.CVE-2021-20073: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for cross-site request forgeries.https://patchthecve.com/cve/CVE-2021-20073.htmlhttps://patchthecve.com/cve/CVE-2021-20073.htmlWed, 17 Jun 2026 03:33:13 +0000HIGH 8.8: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for cross-site request forgeries.CVE-2021-20072: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete filhttps://patchthecve.com/cve/CVE-2021-20072.htmlhttps://patchthecve.com/cve/CVE-2021-20072.htmlWed, 17 Jun 2026 03:33:13 +0000HIGH 7.2: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral.CVE-2021-20071: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings atthttps://patchthecve.com/cve/CVE-2021-20071.htmlhttps://patchthecve.com/cve/CVE-2021-20071.htmlWed, 17 Jun 2026 03:33:13 +0000MEDIUM 4.8: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the sms.php dialogs.CVE-2021-20070: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings atthttps://patchthecve.com/cve/CVE-2021-20070.htmlhttps://patchthecve.com/cve/CVE-2021-20070.htmlWed, 17 Jun 2026 03:33:13 +0000MEDIUM 4.8: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the virtualization.php dialogs.CVE-2021-20069: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attahttps://patchthecve.com/cve/CVE-2021-20069.htmlhttps://patchthecve.com/cve/CVE-2021-20069.htmlWed, 17 Jun 2026 03:33:13 +0000MEDIUM 4.8: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the regionalSettings.php dialogs.CVE-2021-20068: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attahttps://patchthecve.com/cve/CVE-2021-20068.htmlhttps://patchthecve.com/cve/CVE-2021-20068.htmlWed, 17 Jun 2026 03:33:13 +0000MEDIUM 4.8: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the error handling functionality of web pages.CVE-2021-20067: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive syslog events withhttps://patchthecve.com/cve/CVE-2021-20067.htmlhttps://patchthecve.com/cve/CVE-2021-20067.htmlWed, 17 Jun 2026 03:33:13 +0000MEDIUM 5.3: Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive syslog events without authentication.