rAthena vulnerabilities
8 published CVEs name rAthena among the affected products.
- 8Published CVEs8 of them scored
- 1Last 12 monthspublished in the last year
- 2Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-116254
rathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validation
rathena · FluxCP
Medium6.9 - CVE-2025-62797
CSRF in FluxCP account endpoints allows account takeover / state-changing actions
rathena · FluxCP
High8.6 - CVE-2025-62170
rAthena map-server use-after-free vulnerability in RODEX
rathena · rathena
High7.5 - CVE-2025-58750
rAthena missing bound check in chclif_parse_moveCharSlot
rathena · rathena
High8.2 - CVE-2025-58448
rAthena has SQL Injection in PartyBooking component via `WorldName` parameter.
rathena · rathena
Critical9.1 - CVE-2025-58447
rAthena has heap-based buffer overflow in login server
rathena · rathena
Critical9.8 - CVE-2024-45799
Javascript Injection in Vending Info/Buyers Info Module in FluxCP
rathena · FluxCP
High7.3 - CVE-2022-4421
rAthena FluxCP Service Desk Image URL view.php cross site scripting
rAthena · FluxCP
Low3.5