CVE-2026-64826 | Medium | 6.5 | 2026-08-12 | rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying unsanitized directory tr… |
CVE-2026-63102 | Medium | 5.4 | 2026-07-20 | rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated users to assign arbitrary roles to any account by submitting… |
CVE-2023-39110 | High | 8.8 | 2023-08-01 | rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php. This vulnerability allows authe… |
CVE-2023-39109 | High | 8.8 | 2023-08-01 | rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/compareClass.php. Thi… |
CVE-2023-39108 | High | 8.8 | 2023-08-01 | rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/compareClass.php. Thi… |
CVE-2022-45030 | High | 8.8 | 2023-04-15 | A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secure-file-priv). |
CVE-2023-24366 | Medium | 6.5 | 2023-03-27 | An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request. |
CVE-2022-44384 | High | 8.8 | 2022-11-17 | An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2021-29006 | Medium | 6.5 | 2021-10-11 | rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server. |
CVE-2021-29005 | High | 8.8 | 2021-10-11 | Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may… |
CVE-2021-29004 | High | 8.8 | 2021-10-11 | rConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the vulnerability. If --secure-file-priv in MySQL server is not set and the… |
CVE-2020-27466 | High | 7.8 | 2021-08-20 | An arbitrary file write vulnerability in lib/AjaxHandlers/ajaxEditTemplate.php of rConfig 3.9.6 allows attackers to execute arbitrary code via a crafted file. |
CVE-2020-27464 | High | 7.8 | 2021-08-20 | An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrary code via a crafted ZIP file. |
CVE-2020-25359 | Critical | 9.1 | 2021-08-20 | An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability gave attackers the ability to send a crafted request to… |
CVE-2020-25353 | Medium | 6.5 | 2021-08-20 | A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability allowed remote authenticated attackers to open… |
CVE-2020-25352 | Medium | 5.4 | 2021-08-20 | A stored cross-site scripting (XSS) vulnerability in the /devices.php function inrConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed rem… |
CVE-2020-25351 | Medium | 6.5 | 2021-08-20 | An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed remote authenticated attackers to read fi… |
CVE-2020-23151 | Critical | 9.8 | 2021-08-09 | rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to… |
CVE-2020-23150 | High | 7.5 | 2021-08-09 | A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to install… |
CVE-2020-23149 | High | 7.5 | 2021-08-09 | The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a SQL injection and access sensitive database informat… |
CVE-2020-23148 | High | 7.5 | 2021-08-09 | The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a LDAP injection and obtain sensitive information via… |
CVE-2020-13638 | Critical | 9.8 | 2020-11-13 | lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3… |
CVE-2020-13778 | High | 8.8 | 2020-10-19 | rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or l… |
CVE-2020-15715 | Critical | 9.9 | 2020-07-28 | rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attack… |
CVE-2020-15714 | High | 8.8 | 2020-07-28 | rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php script using the custom… |
CVE-2020-15713 | High | 8.8 | 2020-07-28 | rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script using the sortBy para… |
CVE-2020-15712 | Medium | 4.3 | 2020-07-28 | rConfig 3.9.5 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a crafted request to the ajaxGetFileByP… |
CVE-2020-10549 | Critical | 9.8 | 2020-06-04 | rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vul… |
CVE-2020-10548 | Critical | 9.8 | 2020-06-04 | rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vuln… |
CVE-2020-10547 | Critical | 9.8 | 2020-06-04 | rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because, by default, nodes' passwords are stored in cle… |
CVE-2020-10546 | Critical | 9.8 | 2020-06-04 | rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext… |
CVE-2020-12256 | Medium | 5.4 | 2020-05-18 | rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary Java… |
CVE-2020-12255 | High | 8.8 | 2020-05-18 | rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendor.crud.php accepts a file upload by chec… |
CVE-2020-12258 | Critical | 9.1 | 2020-05-18 | rConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishandled. The application can reuse a session via PHPSESSID. Als… |
CVE-2020-12257 | High | 8.8 | 2020-05-18 | rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) because it lacks implementation of CSRF protection such as a CSRF token. An attacker can lever… |
CVE-2020-12259 | Medium | 5.4 | 2020-05-18 | rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting… |
CVE-2020-10879 | Critical | 9.8 | 2020-03-23 | rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the… |
CVE-2020-9425 | High | 7.5 | 2020-03-20 | An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved cleartext credentials via a GET reques… |
CVE-2020-10221 | High | 8.8 | 2020-03-08 | lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName… |
CVE-2020-10220 | Critical | 9.8 | 2020-03-07 | An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter. |
CVE-2019-19585 | High | 7.8 | 2020-01-06 | An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache config… |
CVE-2019-19509 | High | 8.8 | 2020-01-06 | An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php bec… |
CVE-2019-19372 | High | 7.5 | 2019-11-28 | A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders and potentially down… |
CVE-2019-19207 | High | 8.8 | 2019-11-21 | rConfig 3.9.2 allows devices.php?searchColumn= SQL injection. |
CVE-2019-16663 | High | 8.8 | 2019-10-28 | An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to search.crud.php because the catCommand p… |
CVE-2019-16662 | Critical | 9.8 | 2019-10-28 | An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the ro… |