RrAthena

Products

Exploited and recent CVEs

• CVE-2026-116254 Medium 6.5 rathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validation 0.3%
• CVE-2025-62797 High 8.6 CSRF in FluxCP account endpoints allows account takeover / state-changing actions 0.2%
• CVE-2025-62170 High 7.5 rAthena map-server use-after-free vulnerability in RODEX 0.4%
• CVE-2025-58750 High 8.2 rAthena missing bound check in chclif_parse_moveCharSlot 0.3%
• CVE-2025-58448 Critical 9.1 rAthena has SQL Injection in PartyBooking component via `WorldName` parameter. 0.4%
• CVE-2025-58447 Critical 9.8 rAthena has heap-based buffer overflow in login server 0.9%
• CVE-2024-45799 High 7.3 Javascript Injection in Vending Info/Buyers Info Module in FluxCP 0.3%
• CVE-2022-4421 Low 3.5 rAthena FluxCP Service Desk Image URL view.php cross site scripting 0.4%