CVE-2026-64826

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-64826

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64826.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-64826

Published

2026-08-12T20:44:33Z

Modified

2026-11-09T02:47:36Z

Severity

7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

rConfig < 8.2.13 Path Traversal File Read via FileDownloadController

Details

rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying unsanitized directory traversal sequences in the filename GET parameter of the download_export() method. Attackers can craft requests with ../ sequences to escape the exports base directory and access sensitive files readable by the web server process, including application environment files containing encryption keys, database credentials, and mail configuration.

Database specific

{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64826.json"
}

References

Affected packages

Git / github.com/rconfig/rconfig

Affected ranges

Type

GIT

Repo

https://github.com/rconfig/rconfig

Events

Introduced

Fixed

72b60a41d9589f3b2e0c5ea0062734b6a0b5a86d

Fixed

d133a466a2df9d065177de9a8ed50f1bfe438aee

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "8.2.13"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "original_tag": "core-8.2.13",
            "range": [
                {
                    "fixed": "72b60a41d9589f3b2e0c5ea0062734b6a0b5a86d"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "range": [
                {
                    "fixed": "d133a466a2df9d065177de9a8ed50f1bfe438aee"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

core-8.*

core-8.0.0

core-8.0.1

core-8.0.2

core-8.1.0

core-8.1.1

core-8.1.2

core-8.1.3

core-8.2.0

core-8.2.10

core-8.2.11

core-8.2.12

core-8.2.3

core-8.2.4

core-8.2.5

core-8.2.6

core-8.2.7

core-8.2.8

core-8.2.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64826.json"