CVE Tools
Track your stack

Rconfig

23 CVEs tracked since 2019. Since Oct 2019, 1 of them reached CISA KEV.

Rconfig CVEs per month

Oct 2019 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Rconfig CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2019-1020
2019-112 or fewer
2019-122 or fewer
2020-012 or fewer
2020-022 or fewer
2020-0341
2020-04no snapshot
2020-05no snapshot
2020-0640
2020-07no snapshot
2020-082 or fewer
2020-091 or fewer
2020-101 or fewer
2020-111 or fewer
2020-122 or fewer
2021-012 or fewer
2021-022 or fewer
2021-03no snapshot
2021-042 or fewer
2021-052 or fewer
2021-062 or fewer
2021-072 or fewer
2021-08100
2021-092 or fewer
2021-1030
2021-112 or fewer
2021-122 or fewer
2022-012 or fewer
2022-022 or fewer
2022-033 or fewer
2022-043 or fewer
2022-053 or fewer
2022-063 or fewer
2022-073 or fewer
2022-083 or fewer
2022-093 or fewer
2022-102 or fewer
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-064 or fewer
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Rconfig's monthly top three, with their CVEs summed over those months.

  1. Rconfig235 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Rconfig.

  1. CVE-2026-77915rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php9.8
  2. CVE-2026-77914rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint6.5
  3. CVE-2026-64826rConfig < 8.2.13 Path Traversal File Read via FileDownloadController6.5
  4. CVE-2026-63102rConfig Core < 8.2.8 Privilege Escalation via Users API role field5.4
  5. CVE-2023-39110rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php. This vulnerability allows authenticated attackers to make arbitrary r...8.8
  6. CVE-2023-39109rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated a...8.8
  7. CVE-2023-39108rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated a...8.8
  8. CVE-2022-45030A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secure-file-priv).8.8
  9. CVE-2023-24366An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request.6.5
  10. CVE-2022-44384An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP file.8.8
  11. CVE-2021-29005Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may let an attacker with low privilege to ...8.8
  12. CVE-2021-29006rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server.6.5
  13. CVE-2021-29004rConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the vulnerability. If --secure-file-priv in MySQL server is not set and the Mysql server is the same as rConfig, ...8.8
  14. CVE-2020-27466An arbitrary file write vulnerability in lib/AjaxHandlers/ajaxEditTemplate.php of rConfig 3.9.6 allows attackers to execute arbitrary code via a crafted file.7.8
  15. CVE-2020-27464An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrary code via a crafted ZIP file.7.8

The record

Peak rank
#68 in Aug 2021
Busiest month shown
Aug 2021, 10 CVEs
Months with a KEV entry
1 since Oct 2019
Monthly snapshots
5 since 2019
Rconfig's full record, month by month