rConfig Path Traversal — Arbitrary File Read via Export Filename
Authenticated path traversal in rConfig 8.0.0–8.2.12 lets users read arbitrary files via crafted export filenames. Patched in 8.2.13.
- Vendor
- rConfig
- Product
- rConfig
- CVSS
- 6.5
- EPSS (exploit probability)
- 0.7%
- Status
- patched
- Published
Is CVE-2026-77914 being exploited?
Not on any exploited-vulnerability catalog we track. CVE-2026-77914 was not on the CISA, ENISA or CIRCL exploited catalogs as of our 2026-10-22 snapshot. That can change quickly; check the write-up below for the latest reporting.
FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 0.7% (scored October 14, 2026).
- CISA KEV[ — ]
- ENISA EUVD (exploited)[ — ]
- CIRCL KEV[ — ]
Catalog snapshot 2026-10-22. Full cross-catalog view: /kev-comparison
CVE-2026-77914 timeline
Every event links to its source. Catalog dates are each catalog's own; day offsets count from NVD publication. Data: JSON
Path traversal vulnerability in rConfig’s export functionality. An authenticated user can supply a crafted filename to the export endpoint that traverses directory boundaries, resulting in arbitrary file read access on the underlying server.
Affected versions: rConfig 8.0.0 through 8.2.12.
Patch: Upgrade to rConfig 8.2.13. Available at the rConfig releases page.
Exploitation status: No confirmed in-the-wild exploitation. CISA KEV: not listed. Authentication is required, limiting exposure compared to the critical unauthenticated bypass patched alongside this flaw.
Relation to CVE-2026-77915: Both vulnerabilities were addressed in the same 8.2.13 release. CVE-2026-77915 (CVSS 9.8) allows unauthenticated admin account creation. Organizations that have not yet patched should treat both as urgent, particularly given the unauthenticated path in the sibling CVE.
See full coverage: rConfig Auth Bypass Grants Unauthenticated Admin Access
Other rConfig CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-77915 rConfig Authentication Bypass — Unauthenticated Admin Registrationwrite-up | [ CRITICAL ] | 9.8 | 0.8% | — |
| CVE-2020-10221 rConfig OS Command Injection Vulnerability | [ HIGH ] | 8.8 | 77.1% |
