What’s Vulnerable › Products

rconfig vulnerabilities

48 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your rconfig version is affected

Exploited rconfig vulnerabilities

• CVE-2020-10221 — rConfig OS Command Injection Vulnerability

Latest rconfig vulnerabilities

• CVE-2026-77915 — rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php (CVSS 9.8)
• CVE-2026-77914 — rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint (CVSS 6.5)
• CVE-2026-64826 — rConfig < 8.2.13 Path Traversal File Read via FileDownloadController (CVSS 6.5)
• CVE-2026-63102 — rConfig Core < 8.2.8 Privilege Escalation via Users API role field (CVSS 5.4)
• CVE-2023-39110 — (CVSS 8.8)
• CVE-2023-39109 — (CVSS 8.8)
• CVE-2023-39108 — (CVSS 8.8)
• CVE-2022-45030 — (CVSS 8.8)
• CVE-2023-24366 — (CVSS 6.5)
• CVE-2022-44384 — (CVSS 8.8)
• CVE-2021-29006 — (CVSS 6.5)
• CVE-2021-29005 — (CVSS 8.8)
• CVE-2021-29004 — (CVSS 8.8)
• CVE-2020-27466 — (CVSS 7.8)
• CVE-2020-27464 — (CVSS 7.8)
• CVE-2020-25359 — (CVSS 9.1)
• CVE-2020-25353 — (CVSS 6.5)
• CVE-2020-25352 — (CVSS 5.4)
• CVE-2020-25351 — (CVSS 6.5)
• CVE-2020-23151 — (CVSS 9.8)
• CVE-2020-23150 — (CVSS 7.5)
• CVE-2020-23149 — (CVSS 7.5)
• CVE-2020-23148 — (CVSS 7.5)
• CVE-2020-13638 — (CVSS 9.8)
• CVE-2020-13778 — (CVSS 8.8)