Webpros Configserver Security & Firewall
3 CVEs affecting Webpros Configserver Security & Firewall. Latest disclosed: 2026-09-10. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-65639 | | 2026-09-10 | OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to exec… | |
CVE-2026-65638 | | 2026-09-10 | Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF serv… | |
CVE-2026-67402 | | 2026-09-04 | An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauth… |