https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-65076.htmlhttps://patchthecve.com/cve/CVE-2025-65076.htmlWed, 17 Jun 2026 09:55:24 +0000MEDIUM 6.1: WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to read or delete any file on the server using path traversal in the ilog script. This script is being run with root privileghttps://patchthecve.com/cve/CVE-2025-65075.htmlhttps://patchthecve.com/cve/CVE-2025-65075.htmlWed, 17 Jun 2026 09:55:23 +0000MEDIUM 6.5: WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to read or delete files, with the permissions of dvr user, on the server using path traversal in the alog script. This issuehttps://patchthecve.com/cve/CVE-2025-65074.htmlhttps://patchthecve.com/cve/CVE-2025-65074.htmlWed, 17 Jun 2026 09:55:23 +0000HIGH 7.2: WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to execute arbitrary OS commands on the server using path traversal in the showerr script. This issue was fixed in version 6