Configserver Security & Firewall
Approved changes feed: RSS · Atom
cpe:2.3:a:configserver:configserver_security_&_firewall:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Configserver (b670ba60-9e8e-559b-8e60-a57f9297c63f) |
|---|---|
| Product | Configserver Security & Firewall (f5f2aca2-9540-599c-bc38-4cea20186b40) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-65638 |
vulnerable | 2026-09-16 04:33:07.537426 |
Details available
Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection.
The vulnerability affects versions of the software originally distributed by ConfigServer, as well as versions of the WebPros-maintained fork that contain the vulnerable code. WebPros has addressed the vulnerability in version 16.30. Other forks or independently maintained versions of ConfigServer Security & Firewall (CSF) may also be affected and should be evaluated independently.
Published: 2026-09-10T16:24:52.785Z
Updated: 2026-09-10T18:19:18.373Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-65639 |
vulnerable | 2026-09-16 04:33:07.097974 |
Details available
OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data.
The vulnerability affects versions of the software originally distributed by ConfigServer, as well as versions of the WebPros-maintained fork that contain the vulnerable code. WebPros has addressed the vulnerability in version 16.30. Other forks or independently maintained versions of ConfigServer Security & Firewall (CSF) may also be affected and should be evaluated independently.
Published: 2026-09-10T16:24:52.871Z
Updated: 2026-09-10T18:19:47.504Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.