<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: rangee</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-16282: In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the </title><link>https://patchthecve.com/cve/CVE-2020-16282.html</link><guid>https://patchthecve.com/cve/CVE-2020-16282.html</guid><pubDate>Wed, 17 Jun 2026 02:57:59 +0000</pubDate><description>HIGH 8.8: In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the privileged root user. This may allow a local attacker to break out of the restricted environment or inject malicious code into the application and fully compromise the operating system.</description></item><item><title>CVE-2020-16281: The Kommbox component in Rangee GmbH RangeeOS 8.0.4 could allow a local authenticated attacker to escape from </title><link>https://patchthecve.com/cve/CVE-2020-16281.html</link><guid>https://patchthecve.com/cve/CVE-2020-16281.html</guid><pubDate>Wed, 17 Jun 2026 02:57:59 +0000</pubDate><description>HIGH 7.8: The Kommbox component in Rangee GmbH RangeeOS 8.0.4 could allow a local authenticated attacker to escape from the restricted environment and execute arbitrary code due to unrestricted context menus being accessible.</description></item><item><title>CVE-2020-16280: Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for </title><link>https://patchthecve.com/cve/CVE-2020-16280.html</link><guid>https://patchthecve.com/cve/CVE-2020-16280.html</guid><pubDate>Wed, 17 Jun 2026 02:57:59 +0000</pubDate><description>MEDIUM 5.5: Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating sys</description></item><item><title>CVE-2020-16279: The Kommbox component in Rangee GmbH RangeeOS 8.0.4 is vulnerable to Remote Code Execution due to untrusted us</title><link>https://patchthecve.com/cve/CVE-2020-16279.html</link><guid>https://patchthecve.com/cve/CVE-2020-16279.html</guid><pubDate>Wed, 17 Jun 2026 02:57:59 +0000</pubDate><description>CRITICAL 9.8: The Kommbox component in Rangee GmbH RangeeOS 8.0.4 is vulnerable to Remote Code Execution due to untrusted user supplied input being passed to the command line without sanitization.</description></item></channel></rss>