PatchTheCVE: smeuphttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-26762: Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.https://patchthecve.com/cve/CVE-2023-26762.htmlhttps://patchthecve.com/cve/CVE-2023-26762.htmlWed, 17 Jun 2026 05:43:45 +0000HIGH 8.8: Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.CVE-2023-26760: Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug https://patchthecve.com/cve/CVE-2023-26760.htmlhttps://patchthecve.com/cve/CVE-2023-26760.htmlWed, 17 Jun 2026 05:43:45 +0000HIGH 7.5: Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system.CVE-2023-26759: Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made tohttps://patchthecve.com/cve/CVE-2023-26759.htmlhttps://patchthecve.com/cve/CVE-2023-26759.htmlWed, 17 Jun 2026 05:43:45 +0000HIGH 8.8: Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component.CVE-2023-26758: Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /https://patchthecve.com/cve/CVE-2023-26758.htmlhttps://patchthecve.com/cve/CVE-2023-26758.htmlWed, 17 Jun 2026 05:43:45 +0000HIGH 7.5: Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceService.