rConfig vulnerabilities
5 published CVEs name rConfig among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 2Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-70555
rConfig Core 8.2.3 < 8.2.13 Cleartext Credential Exposure via API
rConfig · rConfig
High7.1 - CVE-2026-124079
rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 RCE via Unauthenticated Redis Queue Poisoning
rConfig · rConfig Core
Critical9.3 - CVE-2026-77915
rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php
rconfig · rconfig
Critical9.3 - CVE-2026-64826
rConfig < 8.2.13 Path Traversal File Read via FileDownloadController
rConfig · rConfig
High7.1 - CVE-2026-63102
rConfig Core < 8.2.8 Privilege Escalation via Users API role field
rConfig · rConfig v8 Core
Medium5.3