https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3187.htmlhttps://patchthecve.com/cve/CVE-2026-3187.htmlWed, 17 Jun 2026 10:43:10 +0000MEDIUM 6.3: A vulnerability was identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this issue is some unknown functionality of the file /api/admin/sys-file/upload of the component API Endpoint. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit https://patchthecve.com/cve/CVE-2026-3186.htmlhttps://patchthecve.com/cve/CVE-2026-3186.htmlWed, 17 Jun 2026 10:43:10 +0000MEDIUM 6.3: A vulnerability was determined in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this vulnerability is an unknown functionality of the file /api/admin/sys-user/reset/password/ of the component Password Reset Handler. This manipulation of the argument userId causes use of default password.https://patchthecve.com/cve/CVE-2026-3185.htmlhttps://patchthecve.com/cve/CVE-2026-3185.htmlWed, 17 Jun 2026 10:43:10 +0000MEDIUM 5.3: A vulnerability was found in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected is an unknown function of the file /api/admin/sys-message/ of the component API Endpoint. The manipulation of the argument messageId results in authorization bypass. The attack can be launched remotely. The exploit h