CVE-2026-77914
rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint
- State
- Published
- Severity
- 7.1 High
- Published
- Aug 24, 2026
- Updated
- Oct 1, 2026
- Reserved
- Aug 21, 2026
Description
rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal sequences to escape the intended export directory and access files outside it that are readable by the application process.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
| Product | Versions |
|---|---|
rconfigrconfig |
|
References
- GitHub Security Advisory (GHSA-m5rw-jcrm-mmwc)vendor-advisory
- rConfig core-8.2.13 Release Notesrelease-notes
- https://www.vulncheck.com/advisories/rconfig-v8-core-path-traversal-via-export-download-endpointthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.