Log in Start free

rConfig

Products

ProductCVEsExploitedLatest
rConfig3–Aug 24, 2026
rConfig v8 Core1–Jul 20, 2026

Exploited and recent CVEs

  • CVE-2026-77915 Critical 9.8 rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php 0.8%
  • CVE-2026-77914 Medium 6.5 rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint 0.7%
  • CVE-2026-64826 Medium 6.5 rConfig < 8.2.13 Path Traversal File Read via FileDownloadController 0.5%
  • CVE-2026-63102 Medium 5.4 rConfig Core < 8.2.8 Privilege Escalation via Users API role field 0.3%