https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-38122.htmlhttps://patchthecve.com/cve/CVE-2022-38122.htmlWed, 17 Jun 2026 04:56:08 +0000HIGH 7.5: UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.https://patchthecve.com/cve/CVE-2022-38121.htmlhttps://patchthecve.com/cve/CVE-2022-38121.htmlWed, 17 Jun 2026 04:56:08 +0000MEDIUM 6.5: UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users‘ and administrators' account names and passwords via this unprotected configuration file.https://patchthecve.com/cve/CVE-2022-38120.htmlhttps://patchthecve.com/cve/CVE-2022-38120.htmlWed, 17 Jun 2026 04:56:08 +0000MEDIUM 6.5: UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files.https://patchthecve.com/cve/CVE-2022-38119.htmlhttps://patchthecve.com/cve/CVE-2022-38119.htmlWed, 17 Jun 2026 04:56:08 +0000CRITICAL 9.8: UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service.