Configserver

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 4
    Known Exploited: 0
    0
    Critical Level Threats
    0
    High Level Threats
    1
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-65639

    OS Command Injection in ConfigServer Security & Firewall Advanced-Rule Parser

    Last Modified: Sep 13, 2026
    Published: Sep 10, 2026

    CVE-2026-65638

    Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection. The vulnerability affects versions of the software originally distributed by ConfigServer, as well as versions of the WebPros-maintained fork that contain the vulnerable code. WebPros has addressed the vulnerability in version 16.30. Other forks or independently maintained versions of ConfigServer Security & Firewall (CSF) may also be affected and should be evaluated independently.

    Last Modified: Sep 13, 2026
    Published: Sep 10, 2026

    CVE-2026-67402

    Remote Command Execution via Insecure Apache CGI Mapping in ConfigServer Security & Firewall Messenger v3

    Last Modified: Sep 04, 2026
    Published: Sep 03, 2026

    CVE-2011-5033

    Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.

    Last Modified: Apr 11, 2025
    Published: Dec 29, 2011
    Items Per Page
    Configserver Vulnerabilities & Security CVEs | CVE-DB