https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-50707.htmlhttps://patchthecve.com/cve/CVE-2024-50707.htmlWed, 17 Jun 2026 08:04:58 +0000CRITICAL 10.0: Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an HTTP GET request.https://patchthecve.com/cve/CVE-2024-50704.htmlhttps://patchthecve.com/cve/CVE-2024-50704.htmlWed, 17 Jun 2026 08:04:58 +0000CRITICAL 10.0: Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially crafted HTTP POST request.https://patchthecve.com/cve/CVE-2024-50706.htmlhttps://patchthecve.com/cve/CVE-2024-50706.htmlWed, 17 Jun 2026 08:04:58 +0000CRITICAL 9.8: Unauthenticated SQL injection vulnerability in Uniguest Tripleplay version 23.1+ allows remote attackers to execute arbitrary SQL queries on the backend database.https://patchthecve.com/cve/CVE-2024-50705.htmlhttps://patchthecve.com/cve/CVE-2024-50705.htmlWed, 17 Jun 2026 08:04:58 +0000HIGH 7.1: Unauthenticated reflected cross-site scripting (XSS) vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter.