https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15016.htmlhttps://patchthecve.com/cve/CVE-2025-15016.htmlWed, 14 Oct 2026 19:10:00 +0000CRITICAL 9.8: Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information and log into the system as any user.https://patchthecve.com/cve/CVE-2025-15015.htmlhttps://patchthecve.com/cve/CVE-2025-15015.htmlMon, 19 Oct 2026 22:10:00 +0000HIGH 7.5: Enterprise Cloud Database developed by Ragic has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.https://patchthecve.com/cve/CVE-2024-9985.htmlhttps://patchthecve.com/cve/CVE-2024-9985.htmlWed, 17 Jun 2026 08:25:38 +0000CRITICAL 10.0: Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrary code on the remote server.https://patchthecve.com/cve/CVE-2024-9984.htmlhttps://patchthecve.com/cve/CVE-2024-9984.htmlWed, 17 Jun 2026 08:25:38 +0000CRITICAL 9.8: Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionality to obtain any user's session cookie.https://patchthecve.com/cve/CVE-2024-9983.htmlhttps://patchthecve.com/cve/CVE-2024-9983.htmlWed, 17 Jun 2026 08:25:38 +0000HIGH 7.5: Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.