Skip to content
OpenAdvisories

Vendor

rConfig

5 known vulnerabilities.

Products

rConfig 3 rConfig Core 1 rConfig Pro 1 rConfig v8 Core 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-124079 Public exploit

    rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 RCE via Unauthenticated Redis Queue Poisoning

    rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability that allows unauthenticated network attackers to execute arbitrary code by pushing a crafted serialized job onto the Redis-backed Laravel H…

    rConfig rConfig Pro rConfig Core
  • Critical 9.8
    CVE-2026-77915

    rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php

    rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes() call in routes/web.php that re-enables t…

    rConfig rConfig