https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-47697.htmlhttps://patchthecve.com/cve/CVE-2025-47697.htmlWed, 17 Jun 2026 09:28:34 +0000HIGH 7.5: Client-side enforcement of server-side security issue exists in wivia 5 all versions. If exploited, an unauthenticated attacker may bypass authentication and operate the affected device as the moderator user.https://patchthecve.com/cve/CVE-2025-41406.htmlhttps://patchthecve.com/cve/CVE-2025-41406.htmlWed, 17 Jun 2026 09:22:49 +0000MEDIUM 6.1: Cross-site scripting vulnerability exists in wivia 5 all versions. If exploited, when a user connects to the affected device with a specific operation, an arbitrary script may be executed on the web browser of the moderator user.https://patchthecve.com/cve/CVE-2025-41385.htmlhttps://patchthecve.com/cve/CVE-2025-41385.htmlWed, 17 Jun 2026 09:22:48 +0000HIGH 7.2: An OS Command Injection issue exists in wivia 5 all versions. If this vulnerability is exploited, an arbitrary OS command may be executed by a logged-in administrative user.