Login Request a demo
CS
Product
ConfigServer Security & Firewall
by WebPros · last CVE Sep 10, 2026
3
CVEs
0
On KEV
9.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 3High 0Medium 0Low 0
Severity
All severities3Critical3High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ConfigServer Security & Firewall to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-65639
9.5
1%
Sep 10
OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary…
Affected: 2.15 before 16.30
CVE-2026-65638
9.2
2%
Sep 10
Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via…
Affected: 14.00 before 16.30
CVE-2026-67402
9.2
1%
Sep 3
An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host
Affected: 14.02 before 16.31
Showing 3