https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-36924.htmlhttps://patchthecve.com/cve/CVE-2020-36924.htmlWed, 17 Jun 2026 03:16:31 +0000MEDIUM 6.1: Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inject arbitrary client-side scripts through the content material URL parameter. Attackers can exploit this vulnerability to hijack user sessions, execute cross-site scripting code, and modify dhttps://patchthecve.com/cve/CVE-2020-36923.htmlhttps://patchthecve.com/cve/CVE-2020-36923.htmlWed, 17 Jun 2026 03:16:30 +0000CRITICAL 9.8: Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. Attackers can access hidden system resources like '/#/content-creation' by manipulating client-side access restrictions.https://patchthecve.com/cve/CVE-2020-36922.htmlhttps://patchthecve.com/cve/CVE-2020-36922.htmlWed, 17 Jun 2026 03:16:30 +0000HIGH 7.5: Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints. Attackers can retrieve network interface information, server configurations, and system metadata by sending requests to thttps://patchthecve.com/cve/CVE-2020-36885.htmlhttps://patchthecve.com/cve/CVE-2020-36885.htmlWed, 17 Jun 2026 03:16:25 +0000CRITICAL 9.8: Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute arbitrary code. Attackers can exploit the vulnerability by sending a crafted POST request with oversized data to the FTP client functionality, potenthttps://patchthecve.com/cve/CVE-2025-64730.htmlhttps://patchthecve.com/cve/CVE-2025-64730.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 6.1: Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the product.https://patchthecve.com/cve/CVE-2025-62497.htmlhttps://patchthecve.com/cve/CVE-2025-62497.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 6.5: Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage while logged in, unintended operations may be performed.https://patchthecve.com/cve/CVE-2025-5820.htmlhttps://patchthecve.com/cve/CVE-2025-5820.htmlWed, 17 Jun 2026 09:48:48 +0000HIGH 8.8: Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected Sony XAV-AX8500 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementahttps://patchthecve.com/cve/CVE-2025-5479.htmlhttps://patchthecve.com/cve/CVE-2025-5479.htmlWed, 17 Jun 2026 09:48:00 +0000HIGH 7.5: Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious https://patchthecve.com/cve/CVE-2025-5478.htmlhttps://patchthecve.com/cve/CVE-2025-5478.htmlWed, 17 Jun 2026 09:47:59 +0000HIGH 8.8: Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. Authentication is not required to exploit this vulnerability. The specifihttps://patchthecve.com/cve/CVE-2025-5477.htmlhttps://patchthecve.com/cve/CVE-2025-5477.htmlWed, 17 Jun 2026 09:47:59 +0000HIGH 7.5: Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device https://patchthecve.com/cve/CVE-2025-5476.htmlhttps://patchthecve.com/cve/CVE-2025-5476.htmlWed, 17 Jun 2026 09:47:59 +0000HIGH 8.8: Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected Sony XAV-AX8500 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implhttps://patchthecve.com/cve/CVE-2025-5475.htmlhttps://patchthecve.com/cve/CVE-2025-5475.htmlWed, 17 Jun 2026 09:47:59 +0000HIGH 7.5: Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the https://patchthecve.com/cve/CVE-2024-23972.htmlhttps://patchthecve.com/cve/CVE-2024-23972.htmlWed, 17 Jun 2026 07:13:58 +0000MEDIUM 6.8: Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this vulnerability. The https://patchthecve.com/cve/CVE-2024-23922.htmlhttps://patchthecve.com/cve/CVE-2024-23922.htmlWed, 17 Jun 2026 07:13:53 +0000MEDIUM 6.8: Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this vulnerability. The speci