Login Request a demo
RC
Product
rconfig
by rconfig · last CVE Aug 24, 2026
On CISA KEVExploited in the wild
48
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities48In the news0Timeline
Severity mix
Critical 13High 24Medium 11Low 0
Severity
All severities48Critical13High24Medium11Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add rconfig to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-77914
6.5
1%
Aug 24
rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint
Affected: 8.0.0 before 8.2.13
CVE-2026-64826
6.5
0%
Aug 12
rConfig < 8.2.13 Path Traversal File Read via FileDownloadController
Affected: before 8.2.13
CVE-2023-24366
6.5
1%
Mar 27
An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request
Affected: 6.8.0
CVE-2021-29006
6.5
5%
Oct 11
rConfig 3.9.6 is affected by a Local File Disclosure vulnerability
Affected: 3.9.6
CVE-2020-25353
6.5
1%
Aug 20
A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6
Affected: 3.9.5
CVE-2020-25351
6.5
1%
Aug 20
An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6
Affected: 3.9.5
CVE-2026-63102
5.4
0%
Jul 20
rConfig Core < 8.2.8 Privilege Escalation via Users API role field
Affected: before 8.2.8
CVE-2020-25352
5.4
2%
Aug 20
A stored cross-site scripting (XSS) vulnerability in the /devices.php function inrConfig 3.9.5 has been fixed for version 3.9.6
Affected: 3.9.5
CVE-2020-12256
5.4
96%
May 18
rConfig 3.9.4 is vulnerable to reflected XSS
Affected: 3.9.4
CVE-2020-12259
5.4
96%
May 18
rConfig 3.9.4 is vulnerable to reflected XSS
Affected: 3.9.4
CVE-2020-15712
4.3
2%
Jul 28
rConfig 3.9.5 could allow a remote authenticated attacker to traverse directories on the system
Affected: 3.9.5
Showing 11