Dashboard / CVE-2026-64826

CVE-2026-64826

HIGH
MEDIUM Priority: 0.03 BB Relevance: 64/100
Published: 2026-08-12 Modified: 2026-11-09 First seen: 2026-11-08 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
AT: None
VC: High
VI: None
VA: None

Description

rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying unsanitized directory traversal sequences in the filename GET parameter of the download_export() method. Attackers can craft requests with ../ sequences to escape the exports base directory and access sensitive files readable by the web server process, including application environment files containing encryption keys, database credentials, and mail configuration.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
rConfig rConfig 0 < 8.2.13
rConfig rConfig 0 < 8.2.13

References & Advisories (4)

Bug Bounty Relevance

64 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

7.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.48%
Raw Score 0.004790
Percentile 41.9%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00479
2026-11-12
0.00479
2026-11-10
0.00479
2026-11-09
0.00479
2026-11-08
0.00479

Intelligence Sources

mitre ref →

External Links