Skip to content
OpenAdvisories

Vendor

rConfig

5 known vulnerabilities.

Products

rConfig 3 rConfig Core 1 rConfig Pro 1 rConfig v8 Core 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-64826

    rConfig < 8.2.13 Path Traversal File Read via FileDownloadController

    rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying unsanitized directory traversal sequences in the filename GET parameter of the download_export() method. Attackers can craft…

    rConfig rConfig
  • Medium 5.4
    CVE-2026-63102

    rConfig Core < 8.2.8 Privilege Escalation via Users API role field

    rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated users to assign arbitrary roles to any account by submitting an unvalidated role field through the Users API during user creation or profile updates. Attackers c…

    rConfig rConfig v8 Core