r
rConfig
Security Risk Profile
71
/100
highSecurity Risk Score
Comprehensive risk assessment based on 46 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 28, 2019 to present
46
Total CVEs
37
Critical+High
0
Exploited
36
Unpatched
Threat Assessment
Avg CVSS
8.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
36
Critical/High
Risk Level
71/100
high
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
14High
23Medium
9Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
12
2
OS Command Injection
7
3
SSRF
4
4
Path Traversal
3
5
XSS
3
Most Affected Products
1. rConfig rConfig46
2. rConfig rConfig Core1
3. rConfig rConfig Pro1
4. rConfig Core1
Recent Vulnerabilities
See more →CVE-2026-124079
CVSS 9.3critical
rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 RCE via Unauthenticated Redis Queue Poisoning
Nov 9, 2026🔧 No Patch
CVE-2026-63102
CVSS 5.3medium
rConfig Core < 8.2.8 Privilege Escalation via Users API role field
Jul 20, 2026🔧 No Patch
CVE-2023-39108
CVSS 8.8high
Aug 1, 2023🔧 No Patch
CVE-2023-39110
CVSS 8.8high
Aug 1, 2023🔧 No Patch
CVE-2023-39109
CVSS 8.8high
Aug 1, 2023🔧 No Patch
CVE-2022-45030
CVSS 8.8high
Apr 15, 2023🔧 No Patch
CVE-2023-24366
CVSS 6.5medium
Mar 27, 2023🔧 No Patch
CVE-2022-44384
CVSS 8.8high
Nov 17, 2022🔧 No Patch
CVE-2021-29005
CVSS 8.8high
Oct 11, 2021🔧 No Patch
CVE-2021-29006
CVSS 6.5medium
Oct 11, 2021🔧 No Patch
Monitor rConfig in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.