CO
Vendor
ConfigServer
4
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-65639 | CS ConfigServer Security & Firewall ConfigServer | 9.5 | Sep 10 | OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary… |
| CVE-2026-65638 | CS ConfigServer Security & Firewall ConfigServer | 9.2 | Sep 10 | Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via… |
| CVE-2026-67402 | CS ConfigServer Security & Firewall ConfigServer | 9.2 | Sep 3 | An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host |
| CVE-2011-5033 | CS Configserver Security Firewall Configserver | – | Dec 29 | Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service… |