https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-35837.htmlhttps://patchthecve.com/cve/CVE-2023-35837.htmlWed, 17 Jun 2026 06:05:18 +0000CRITICAL 9.8: An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default password, equal to the registration ID of the device. This same registration ID is used as thhttps://patchthecve.com/cve/CVE-2023-35836.htmlhttps://patchthecve.com/cve/CVE-2023-35836.htmlWed, 17 Jun 2026 06:05:17 +0000MEDIUM 6.5: An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the target'shttps://patchthecve.com/cve/CVE-2023-35835.htmlhttps://patchthecve.com/cve/CVE-2023-35835.htmlWed, 17 Jun 2026 06:05:17 +0000CRITICAL 9.8: An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi access point for initial configuration. The WiFi network provided has no network authentication (such as an encryption key) and persists permanently, including after enrollment and setup is complete. The WiFi