https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-2683.htmlhttps://patchthecve.com/cve/CVE-2026-2683.htmlWed, 17 Jun 2026 10:31:32 +0000MEDIUM 4.3: A vulnerability was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). The affected element is an unknown function of the file /Using/Subject/downLoad.html. Performing a manipulation of the argument path results in path traversal. The attack may be initiated remotely. The explohttps://patchthecve.com/cve/CVE-2026-2682.htmlhttps://patchthecve.com/cve/CVE-2026-2682.htmlWed, 17 Jun 2026 10:31:31 +0000MEDIUM 6.3: A vulnerability has been found in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). Impacted is an unknown function of the file /mine/PublicReport/prinReport.html?token=java. Such manipulation of the argument comid leads to sql injection. The attack can be launched remotely. The https://patchthecve.com/cve/CVE-2026-2672.htmlhttps://patchthecve.com/cve/CVE-2026-2672.htmlWed, 17 Jun 2026 10:31:30 +0000MEDIUM 4.3: A security flaw has been discovered in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is the function Download of the file /Search/Subject/downLoad. Performing a manipulation of the argument path results in path traversal. The attack is possible to be