https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-43326.htmlhttps://patchthecve.com/cve/CVE-2022-43326.htmlWed, 17 Jun 2026 05:06:18 +0000HIGH 7.5: An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbitrarily change user and Administrator account passwords.https://patchthecve.com/cve/CVE-2022-36642.htmlhttps://patchthecve.com/cve/CVE-2022-36642.htmlWed, 17 Jun 2026 04:53:47 +0000CRITICAL 9.8: A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive informatiohttps://patchthecve.com/cve/CVE-2020-17383.htmlhttps://patchthecve.com/cve/CVE-2020-17383.htmlWed, 17 Jun 2026 02:58:49 +0000CRITICAL 9.8: A directory traversal vulnerability on Telos Z/IP One devices through 4.0.0r grants an unauthenticated individual root level access to the device's file system. This can be used to identify configuration settings, password hashes for built-in accounts, and the cleartext password for remote configura