PatchTheCVE: resourcexpresshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-28898: In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parametershttps://patchthecve.com/cve/CVE-2020-28898.htmlhttps://patchthecve.com/cve/CVE-2020-28898.htmlWed, 17 Jun 2026 03:10:47 +0000MEDIUM 5.3: In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation.CVE-2020-25746: QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the devichttps://patchthecve.com/cve/CVE-2020-25746.htmlhttps://patchthecve.com/cve/CVE-2020-25746.htmlWed, 17 Jun 2026 03:07:13 +0000MEDIUM 4.6: QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the device) to obtain sensitive information via the debug interface (keystrokes over a USB cable), aka wireless password visibility.CVE-2020-13877: SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code exehttps://patchthecve.com/cve/CVE-2020-13877.htmlhttps://patchthecve.com/cve/CVE-2020-13877.htmlWed, 17 Jun 2026 02:53:49 +0000CRITICAL 9.8: SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure.