CS
Product
ConfigServer Security & Firewall
4
CVEs
0
On KEV
9.5
Max CVSS
0
New 30D
Severity mix
Critical 3High 0Medium 0Low 0
Watch
Add ConfigServer Security & Firewall to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-65639 | 9.5 | Sep 10 | OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary… Affected: 2.15 |
| CVE-2026-65638 | 9.2 | Sep 10 | Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via… Affected: 14.00 |
| CVE-2026-67402 | 9.2 | Sep 3 | An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host Affected: 14.02 |
| CVE-2011-5033 | – | Dec 29 | Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service… Affected: through 5.42; 5.00; 5.01; 5.02; 5.03; 5.04; +30 more |
Showing 4