Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-70555— rConfig Core 8.2.3 < 8.2.13 Cleartext Credential Exposure via API

Quick assessment

Affected
rConfig rConfig
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 8.2.13 版本之前的 rConfig Core 8.2.3 中存在一个信息泄露漏洞。该漏洞允许已认证用户通过 device-credentials API 获取受管设备的明文 SSH、Telnet 和 enable 密码。其成因是系统在读取时自动解密凭证，且缺少必要的授权检查。攻击者可通过发起以下请求，利用任意有效令牌以预置的管理员账户身份进行无状态身份验证，从而窃取所有存储的明文设备凭证： GET /api/device-credentials GET /api/device-credentials/{i

CVSS 6.5 · Medium

Affected Version Matrix 1

VendorProduct Version RangeStatus
rConfig rConfig 8.2.3< 8.2.13 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-70555

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
rConfig Core 8.2.3 < 8.2.13 Cleartext Credential Exposure via API
Source: CVE Program / CVE List V5
Vulnerability Description
rConfig Core 8.2.3 before 8.2.13 contains an information disclosure vulnerability that allows authenticated users to retrieve cleartext SSH, Telnet, and enable passwords for managed devices through the device-credentials API due to automatic decryption on read and missing authorization checks. Attackers can request GET /api/device-credentials, GET /api/device-credentials/{id}, or the external GET /api/v1/device-credentials endpoint, which authenticates any valid token as the seeded administrator account, to statelessly exfiltrate all stored plaintext device credentials. rConfig Pro is not affected.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
rConfig rConfig 8.2.3 ~ 8.2.13 -

II. Public POCs for CVE-2026-70555

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-70555

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-70555 (1)

Other References for CVE-2026-70555 (2)

IV. Related Vulnerabilities

Same product: rConfig
Same vendor: rConfig
Same weakness: CWE-862