Browse all 4 CVE security advisories affecting rConfig. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-77915 | rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php — rconfig CWE-306 | 9.8 | Critical | 2026-08-24 |
| CVE-2026-77914 | rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint — rconfig CWE-22 | 6.5 | Medium | 2026-08-24 |
| CVE-2026-64826 | rConfig < 8.2.13 Path Traversal File Read via FileDownloadController — rConfig CWE-22 | 6.5 | Medium | 2026-08-12 |
| CVE-2026-63102 | rConfig Core < 8.2.8 Privilege Escalation via Users API role field — rConfig v8 Core CWE-915 | 5.4 | Medium | 2026-07-20 |
This page lists every published CVE security advisory associated with rConfig. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.