CS
Product
ConfigServer Security & Firewall
4
CVEs
0
On KEV
9.5
Max CVSS
0
New 30D
Severity mix
Critical 3High 0Medium 0Low 0
Watch
Add ConfigServer Security & Firewall to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-65639 | 9.5 | Sep 10 | OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary… Affected: 2.15 |
| CVE-2026-65638 | 9.2 | Sep 10 | Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via… Affected: 14.00 |
| CVE-2026-67402 | 9.2 | Sep 3 | An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host Affected: 14.02 |
Showing 3