there were even two more unauthenticated RCE and authentication bypass issues found, Xerox already patched those in the past, but did not mention them in their security notes? 🤔