ConfigServer vulnerabilities
3 published CVEs name ConfigServer among the affected products.
- Published CVEs
- 3
- Last 12 months
- 3
- Critical
- 3
- Known exploited
- 0
Critical 3High 0Medium 0Low 0Not scored 0
Newest CVEs
- CVE-2026-65639
OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to…
WebPros · ConfigServer Security & Firewall
Critical9.5 - CVE-2026-65638
Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF…
WebPros · ConfigServer Security & Firewall
Critical9.2 - CVE-2026-67402
An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote…
WebPros · ConfigServer Security & Firewall
Critical9.2