https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-37847.htmlhttps://patchthecve.com/cve/CVE-2024-37847.htmlWed, 17 Jun 2026 07:38:55 +0000HIGH 8.8: An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute arbitrary code via a crafted file.https://patchthecve.com/cve/CVE-2024-37846.htmlhttps://patchthecve.com/cve/CVE-2024-37846.htmlWed, 17 Jun 2026 07:38:54 +0000MEDIUM 4.6: MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection (CSTI) vulnerability via the Platform Management Edit page.https://patchthecve.com/cve/CVE-2024-37845.htmlhttps://patchthecve.com/cve/CVE-2024-37845.htmlWed, 17 Jun 2026 07:38:54 +0000HIGH 7.2: MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Process Command feature.https://patchthecve.com/cve/CVE-2024-37844.htmlhttps://patchthecve.com/cve/CVE-2024-37844.htmlWed, 17 Jun 2026 07:38:54 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in MangoOS before 5.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.